Merge pull request #219900 from qbit/step-kms

{ stdenv

, lib

, buildGoModule

, fetchFromGitHub

, pkg-config

, pcsclite

, softhsm

, opensc

, yubihsm-shell

, writeScriptBin }:

buildGoModule rec {

  pname = "step-kms-plugin";

  version = "0.7.0";

  src = fetchFromGitHub {

    owner = "smallstep";

    repo = pname;

    rev = "v${version}";

    hash = "sha256-5oMkR997ZbPpOqazpyxEvLKbak7THAu855FC6a/Tr+4=";

  };

  vendorHash = "sha256-Zd2rZez5vP9uL5dolGHO8FR0ARoYP78amcakK/lKtdc=";

  proxyVendor = true;

  nativeBuildInputs = [

    pkg-config

  ];

  buildInputs = [

    opensc

    pcsclite

    softhsm

    yubihsm-shell

  ];

  ldflags = [

    "-w"

    "-s"

    "-X github.com/smallstep/step-kms-plugin/cmd.Version=${version}"

  ];

  meta = with lib; {

    description = "step plugin to manage keys and certificates on cloud KMSs and HSMs";

    homepage = "https://smallstep.com/cli/";

    license = licenses.asl20;

    maintainers = with maintainers; [ qbit ];

    mainProgram = "step-kms-plugin";

    # can't find pcsclite header files

    broken = stdenv.isDarwin;

  };

}

  step-cli = callPackage ../tools/security/step-cli { };

  step-kms-plugin = callPackage ../tools/security/step-kms-plugin { };

  string-machine = callPackage ../applications/audio/string-machine { };

  stripe-cli = callPackage ../tools/admin/stripe-cli {