Bryon Nevis

pkcs11-tool AES keygen fails

2

## Environment Board: APL UPSquared with PTT OS: Ubuntu 20.04 (opensc 0.20.0-3) tpm2-tss: 4.2.1 (tarball) tpm2-pkcs11: 1.3.1 (tarball) tpm2-tools: 4.1.3 (tarball) tpm2-abrmd: Not installed Token initialized with tpm2_ptool with label...

go-check (Makefile) doesn't appear to work as intended

8

* **Version**: 1.2.1 * **Platform**: apline 3.15 (x86_64) * **Subsystem**: build The go-check hook doesn't appear to be working as intended when run in an Alpine build container. ``` Step...

installer.sh -t does not create agent tarball

1

``` # ./installer.sh -t ... ================================================================================== Generate agent tarball ================================================================================== ./installer.sh: line 450: ./make_agent_bundle_tarball.sh: No such file or directory ================================================================================== ``` # Environment * OS / version: Ubuntu 22.04 *...

Request to add check for math injection

2

#### For new checks and feature suggestions - [X] https://www.shellcheck.net/ (i.e. the latest commit) currently gives no useful warnings about this - [X] I searched through https://github.com/koalaman/shellcheck/issues and didn't find...

configureTLS() does not handle map[string]interface{} that contains a boolean

1

The `InitVaultKMS()` function in `vault/vault.go` takes a map. One of the parameters that it can take is `vaultCAVerify: (string-bool)`. Example: ``` kmsID := "vault-kms" config := map[string]interface{}{ "vaultCAVerify": "false", }...

Ability to seal/unseal own TLS certificate

12

Although there is a built-in PKI secrets engine, OpenBao can't bootstrap its own TLS certificate. A handy feature would be able to use the PKI secrets engine to create OpenBao's...

Feature Suggestion: SPIFFE authentication plugin

4

### Summary Support a SPIFFE authentication plugin that would allow a user to obtain an authentication token via SPIFFE mTLS. ### Problem Statement The problem that any user of OpenBao...

Extensible seal mechanism

3

I could be mistaken, but I do not think that the current seal mechanism is extensible. It would be useful, in IoT scenarios for example, to be able to support...