Jarian Cottingham c759597ad0 fix: pass YubiKey PIN via stdin instead of CLI arg (#18, #31)
--pin-source stdin prevents PIN visibility in `ps` output.
Use tempfile.mkstemp for all temp files (unpredictable names, 0600 perms).
Clean up temp files in finally block.
Add tests for PIN not in args and mkstemp usage.
2026-07-04 04:49:56 +00:00
2026-07-03 01:14:04 +00:00
2026-07-01 04:52:16 +00:00
2026-07-03 01:14:04 +00:00
2026-07-03 01:14:04 +00:00
Description
Self-contained certificate authority with YubiKey-backed signing. Root + intermediate CA keys on two YubiKeys; every signing requires physical touch + PIN.
MIT 134 KiB
Languages
Python 47.1%
HTML 27.3%
Shell 25.6%