clevis 0.2.0

A preliminary Rust implementation of the clevis protocol
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34

# clevis-rs

This crate is an implementation of the clevis client to the [Tang] protocol
used for generating encryption keys.

This project is NOT officially associated with Latchset, publisher of Clevis
and Tang.

This crate is a work in progress.

## Tang

The basic operations path is taken from the [Tang] specification. In short, the
encrypting client must:

1. Request a public key with `GET /adv`. This returns a JWK set as a JWS
2. Verify the integrity of the received JWS using the included `verify` key

The config can specify:

- Tang URL
- Thumbprint

The URL specifies which server to query, while the thumbprint specifies a
preferred key.


## Licensing

Since this project takes heavy influence from the original [clevis], it retains
the GPLv3 license.

[tang]: https://github.com/latchset/tang
[clevis]: https://github.com/latchset/clevis