{"id":15649602,"url":"https://github.com/mattes/google-cloud-kms-csr","last_synced_at":"2025-04-30T17:22:03.470Z","repository":{"id":53735791,"uuid":"150373838","full_name":"mattes/google-cloud-kms-csr","owner":"mattes","description":"Create CSR request with Google Cloud KMS or HSM","archived":false,"fork":false,"pushed_at":"2021-10-08T05:10:08.000Z","size":291,"stargazers_count":41,"open_issues_count":2,"forks_count":24,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-04-19T07:47:08.022Z","etag":null,"topics":["certificate-signing-request","csr","google-cloud-hsm","google-cloud-kms","openssl"],"latest_commit_sha":null,"homepage":"https://cloud.google.com/hsm/","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"unlicense","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/mattes.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2018-09-26T05:39:26.000Z","updated_at":"2025-03-11T07:50:00.000Z","dependencies_parsed_at":"2022-09-23T19:30:44.292Z","dependency_job_id":null,"html_url":"https://github.com/mattes/google-cloud-kms-csr","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattes%2Fgoogle-cloud-kms-csr","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattes%2Fgoogle-cloud-kms-csr/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattes%2Fgoogle-cloud-kms-csr/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mattes%2Fgoogle-cloud-kms-csr/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/mattes","download_url":"https://codeload.github.com/mattes/google-cloud-kms-csr/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":251749121,"owners_count":21637457,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["certificate-signing-request","csr","google-cloud-hsm","google-cloud-kms","openssl"],"created_at":"2024-10-03T12:30:24.560Z","updated_at":"2025-04-30T17:22:03.439Z","avatar_url":"https://github.com/mattes.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# CSR with Google Cloud KMS\n\nQuick utility tool that creates a CSR cert and signs it with a private key coming from Google Cloud KMS or HSM.\nThe private key never leaves Google, everyone is happy. The CSR can then be used to get cert from CA.\n\nI would've done it with `openssl`, but there is no Google Cloud KMS engine available. (Sept. 2018)\n\n\n## Usage\n\n```\ngo build -o csr\n./csr -key \u003ckey-resource-id\u003e -out my.csr --common-name MyOrg\n```\n\nGet the key-resource-id by running the following command:\n```\ngcloud kms keys versions list  --key \u003ckeyname\u003e --keyring \u003ckeyring-name\u003e --location=\u003cregion\u003e\n```\n\nKey Resource Id Version has the following format:\n\n```\nprojects/xxx/locations/xxx/keyRings/xxx/cryptoKeys/xxx/cryptoKeyVersions/xxx\n```\n\nMake sure to use an asymmetric key.\n\n\nYou can verify `my.csr` with:\n\n```\nopenssl req -text -noout -verify -in my.csr\n```\n\nGoogle's application credentials are used for authenticating with the Google API.\nIf you haven't done so already, you can set the application default credentials locally with:\n\n```\ngcloud auth application-default login\n```\n\n\n## Docs\n\n  * https://cloud.google.com/kms/docs/how-tos\n  * https://en.wikipedia.org/wiki/Certificate_signing_request\n\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmattes%2Fgoogle-cloud-kms-csr","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmattes%2Fgoogle-cloud-kms-csr","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmattes%2Fgoogle-cloud-kms-csr/lists"}