make-ev-csr

Documentation

Overview

This code requires a configuration file to initialize the crypto11 library. Use the following config in a file named "crypto11.config"

For AWS, this file will look something like:

{
"Path" : "/opt/cloudhsm/lib/libcloudhsm_pkcs11.so",
"TokenLabel": "cavium",
"Pin" : "$CRYPTO_USER:$PASSWORD"
}

For GCP, this file will look something like:

{
"Path": "/path/to/libkmsp11.so",
"TokenLabel": "gcp"
}

You will additionally need a kmsp11 yml configuration file created and specified in the KMS_PKCS11_CONFIG environment variable. This will look something like: --- tokens:

• key_ring: projects/autograph/locations/us-west-2/keyRings/autograph-keyring
• label: gcp

Note that the label must match between the two configuration files.