Jens-Kristian Myklebust

In my specific case it's a SMTP server that reports GSSAPI yes.

That's some big specifications.... 😅 Maybe a somewhat naive question: Could you leverage the Windows APIs for this? Example: https://docs.microsoft.com/en-us/windows/win32/secauthn/sspi-kerberos-interoperability-with-gssapi Obviously that wont be a solid cross-platform solution, but as...

I found that the folder names are also case sensitive. I haven't tested with the main Inbox folder but have made separate folders under the root hierarchy for both the...

I'm questioning the assertion that DPAPI is not available for Managed Service Accounts? Here is a simple test setup using PsExec from Systinternals (executed with local admin rights). If you...

Adding "storage-directory" did work, thanks! ````json "kms": { "type": "tpmkms", "uri": "tpmkms:storage-directory=C:/ACMECA/conf/tpm" } ```` As for why I'm using CGO is because i'm following the documentation here which states you...

Tested with the regular Windows build of step-ca and tpmkms works fine. However if i try to use ``capi`` i only get the error ``unsupported kms type 'capi'``. At least...

I found another issue though probably slightly outside the scope of the orignal bug report. All keys generated ends up in the user store. However I'm trying to run step-ca...

I built a custom version of step-ca with adding ``_ "go.step.sm/crypto/kms/capi"`` to https://github.com/smallstep/certificates/blob/master/cmd/step-ca/main.go#L29-L37 This at least makes step-ca be able to understand ``capi``. However it's throwing ``NTE_BAD_KEYSET`` left and right....

It's probably good to track the issue at least, and it's not super important to me that it gets resolved as I can work around it. However I did take...

This setting grouped Norwegian into "English", which it's very obviously not.... There is a reason there is so many different languages, and I think grouping them together for "simplicity" does...