swedenconnect/eid-ops
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Credential config for QA-connector, SC-2670

Browse source
This commit is contained in:
Patrik Holmqvist 2025-02-19 15:09:38 +01:00
parent 27606e9f71
commit 90493283f7
Signed by: pahol
GPG key ID: 5D5B0D4E93F77273
2 changed files with 7 additions and 139 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

119
connector-qa-sto1-1.komreg.net/overlay/etc/hiera/data/local.eyaml
View file

File diff suppressed because one or more lines are too long

27
global/overlay/etc/puppet/modules/eid/templates/connector/application-qa.yml.erb
View file

@ -60,32 +60,15 @@ management:
credential: credential:
bundles: bundles:
keystore: pem:
pkcs11-store:
type: PKCS11
provider: SunPKCS11
password: ${PKCS11_PIN}
pkcs11:
configuration-file: ${CONNECTOR_DIRECTORY}/credentials/pkcs11.cfg
jks:
connector-sign: connector-sign:
name: "Connector Signing Credential" name: "Connector Signing Credential"
store-reference: pkcs11-store certificates: file:${CONNECTOR_DIRECTORY}/credentials/metadata.crt
key: private-key: file:${CONNECTOR_DIRECTORY}/credentials/metadata.key
certificates: file:${CONNECTOR_DIRECTORY}/credentials/sign.crt
# The alias should be the name of the CKA_LABEL attribute
alias: sc_eidas_sign
key-password: ${PKCS11_PIN}
monitor: true
connector-encrypt: connector-encrypt:
name: "Connector Encryption Credential" name: "Connector Encryption Credential"
store-reference: pkcs11-store certificates: file:${CONNECTOR_DIRECTORY}/credentials/connector.crt
key: private-key: file:${CONNECTOR_DIRECTORY}/credentials/connector.key
# certificates: file:${CONNECTOR_DIRECTORY}/credentials/enc.crt
# The alias should be the name of the CKA_LABEL attribute
alias: sc_eidas_encrypt
key-password: ${PKCS11_PIN}
monitor: true
monitoring: monitoring:
enabled: true enabled: true
test-interval: 10m test-interval: 10m