Skip to content

[v16] feat: Hardware Key Agent validates known keys#54908

Merged
Joerger merged 1 commit intobranch/v16from
joerger/v16/skip-validate-piv-cert
May 19, 2025
Merged

[v16] feat: Hardware Key Agent validates known keys#54908
Joerger merged 1 commit intobranch/v16from
joerger/v16/skip-validate-piv-cert

Conversation

@Joerger
Copy link
Copy Markdown
Contributor

@Joerger Joerger commented May 16, 2025

backport #54691 to branch/v16

Changelog: Hardware Key Agent validates known keys by checking active or expired login session.

* * Have hardware key agent validate known keys instead of always validating by the PIV slot cert.

* Refactor cert check logic with a custom error.

* Add test.

* Update rfd.

* Fix lint.

* Address comments.

* Require knownKeyFn to be provided.

* Require fallbackService to be provided to agent service.

* Address comments.
@Joerger Joerger force-pushed the joerger/v16/skip-validate-piv-cert branch from 1efdb06 to 20cb2fc Compare May 16, 2025 22:53
@github-actions github-actions Bot requested review from greedy52 and rosstimothy May 16, 2025 22:53
@github-actions github-actions Bot added backport size/md tsh tsh - Teleport's command line tool for logging into nodes running Teleport. labels May 16, 2025
@public-teleport-github-review-bot public-teleport-github-review-bot Bot removed the request for review from greedy52 May 19, 2025 13:16
@Joerger Joerger added this pull request to the merge queue May 19, 2025
@github-merge-queue github-merge-queue Bot removed this pull request from the merge queue due to no response for status checks May 19, 2025
@Joerger Joerger added this pull request to the merge queue May 19, 2025
Merged via the queue into branch/v16 with commit d98bca9 May 19, 2025
39 checks passed
@Joerger Joerger deleted the joerger/v16/skip-validate-piv-cert branch May 19, 2025 18:25
@fheinecke fheinecke mentioned this pull request May 22, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport size/md tsh tsh - Teleport's command line tool for logging into nodes running Teleport.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants