added test for CA generation + use SeedSize constant

Previously, I just hard coded 256 as the key length that seeds the key
generation since it worked. Now, it uses ed25519.SeedSize (32) instead.
This commit is contained in:
miampf 2025-01-09 17:24:32 +01:00
parent 0be301fa3a
commit bee3f6c159
No known key found for this signature in database
GPG key ID: EF039364B5B6886C
3 changed files with 38 additions and 2 deletions

View file

@ -7,6 +7,7 @@ SPDX-License-Identifier: AGPL-3.0-only
package cmd
import (
"crypto/ed25519"
"crypto/rand"
"fmt"
"os"
@ -70,7 +71,7 @@ func runSSH(cmd *cobra.Command, _ []string) error {
if err != nil {
return fmt.Errorf("setting up KMS: %s", err)
}
key, err := kms.GetDEK(cmd.Context(), crypto.DEKPrefix+constants.SSHCAKeySuffix, 256)
key, err := kms.GetDEK(cmd.Context(), crypto.DEKPrefix+constants.SSHCAKeySuffix, ed25519.SeedSize)
if err != nil {
return fmt.Errorf("retrieving key from KMS: %s", err)
}