-
Notifications
You must be signed in to change notification settings - Fork 134
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Various nits trying SoftHSM #217
Conversation
This incorporates a variety of nits I found trying out SoftHSM, including things like how to actually get the necessary tooling installed. Signed-off-by: Matt Moore <[email protected]>
cc @lukehinds |
"Path" : "/usr/lib64/softhsm/libsofthsm.so", | ||
"TokenLabel": "test", | ||
"Path" : "/usr/lib/softhsm/libsofthsm2.so", | ||
"TokenLabel": "fulcio", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This mismatch was an annoying diff from the README
So with these tweaks, I reached the point of Line 74 in f176811
Presumably because |
``` | ||
apt-get install softhsm2 opensc | ||
``` | ||
|
||
To configure a SoftHSM: | ||
|
||
Create a `config/crypto11.conf` file: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
line 43 uses .cfg
, which way do you want it?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There are two configs 😅
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The default location of the config file is /etc/softhsm2.conf. This location can be change by setting the environment variable.
export SOFTHSM2_CONF=/home/user/config.file
Details on the configuration can be found in "man softhsm2.conf".
decent walk through here (although looks like you don't need to build from source in your case):
https://wiki.opendnssec.org/plugins/servlet/mobile?contentId=3211298#content/view/3211298
I am back tomorrow and will take a look first thing. Did you manage to install and use the pkcs11tool? |
@lukehinds Yeah, I also added the |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
This incorporates a variety of nits I found trying out SoftHSM, including things like how to actually get the necessary tooling installed.
Signed-off-by: Matt Moore [email protected]
Ticket Link
N/A
Release Note