From Fedora Project Wiki
No edit summary
Line 10: Line 10:
     ];
     ];


     "pemfile" => (
     gnutls (
        "key" => "pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;token=System%20softtoken;type=private",
        "priority" => "NORMAL:%SERVER_PRECEDENCE",
        "cert" => "pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;token=System%20softtoken;type=cert"
        "listen" => "0.0.0.0:443",
    )
        "listen" => "[::]:443",
        "pin" => "2092",
 
        "pemfile" => (
            "key" => "pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;token=System%20softtoken;type=private",
            "cert" => "pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;token=System%20softtoken;type=cert"
        )
    )
</pre>
</pre>
The exact PKCS #11 URLs can be seen using  
The exact PKCS #11 URLs can be seen using  

Revision as of 14:43, 2 April 2015

Setting up server applications to use caml-crush-softhsm

For information on how to setup caml-crush-softhsm click here. The rest of this section discusses how to configure specific daemons for caml-crush.

lighttpd2

The minimum configuration file for lighttpd2 should contain the following.

    module_load [
        "mod_gnutls",
    ];

    gnutls (
        "priority" => "NORMAL:%SERVER_PRECEDENCE",
        "listen" => "0.0.0.0:443",
        "listen" => "[::]:443",
        "pin" => "2092",

        "pemfile" => (
            "key" => "pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;token=System%20softtoken;type=private",
            "cert" => "pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;token=System%20softtoken;type=cert"
        )
    )

The exact PKCS #11 URLs can be seen using

p11tool --list-all --login pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;token=System%20softtoken

Before running ensure that the user lighttpd2 runs with is on the pkcs11proxy group.