mirror of
https://github.com/NLnetLabs/krill.git
synced 2026-09-23 01:44:54 +02:00
Ximon EighteenandGitHub
faf6bd2549
Support multiple signers of different types behind a HSM feature flag, and support in principle selecting which signer to use for which purpose. (#539)
919 B
919 B
HSM: Architecture
Why create new KMIP crates?
No well or actively maintained Rust support for KMIP with sufficient functionality for Krill existed at the time of writing.
The closest candidate, https://github.com/visa/kmip, was used to explore KMIP support in the Krill HSM prototype code. However, it was decided to create our own KMIP library because the visa crate:
- Was not published on crates.io.
- Had only rudimentary error reporting (as it targets no-std environments).
- Lacks documentation.
- Lacked TCP+TLS client support.
- Lacked support for KMIP operations that Krill requires.
- Did not appear to be actively maintained or intended for use by others.
Why not add KMIP code to Krill directly?
The Krill code base is already large enough and slow enough to compile. KMIP support may also be of interest to others. It thus seemed a good candidate for separation from Krill itself.