Add support for Hashicorp Vault

Vault is supported for the following:
As a well-known filesystem for TLS cert, TLS key and SSH signing key.
For configuration secrets for cookie_secret, csrf_secret, oauth_client_id and oauth_client_secret options.

1 files changed, 10 insertions, 0 deletions

diff --git a/server/util/util.go b/server/util/util.go
new file mode 100644
index 0000000..10f5eca
--- /dev/null
+++ b/server/util/util.go
@@ -0,0 +1,10 @@
+package util
+
+import "golang.org/x/crypto/ssh"
+
+// GetPublicKey marshals a ssh certificate to a string.
+func GetPublicKey(cert *ssh.Certificate) string {
+	marshaled := ssh.MarshalAuthorizedKey(cert)
+	// Strip trailing newline
+	return string(marshaled[:len(marshaled)-1])
+}