yubico / yubihsm-setup Goto Github PK

It would be useful to be able to generate a split wrapkey without generating other keys (eg when using the ejbca or ksp subcommands) to allow us to backup pre-existing keys on the YubiHSM to wrapped exported files. I previously raised this under support request 422029.

I will submit a PR for this

The dump command allows the authkey id and password to be specified as command line arguments but it does not allow the wrapkey id to be specified as an argument. This make it difficult to use the dump command in a script because it requires interaction.

I don't have any experience with Rust but I will make an attempt and submit a PR if there is interest.