corda/docs/source/corda-hsm.rst

Configuring the node to use the Utimaco HSM
==================

.. contents::

TODO
-------
[ENT-2539] Implement support for holding node Legal Identity keys in Ultimaco HSM (#1571) * Add dependencies for Utimaco HSM. The CryptoServerJCE.jar was added in node/lib. The node/capsule/build.gradle excludes this jar from the final corda.jar. * Copy the HSM Simulator utility from Network Services. HsmSimulator.kt uses the spotify docker client to pull an image with a pre-configured hsm simulator from our docker registry and run it in integration tests. * Implementation of the CryptoService interface for Utimaco HSM. * Integration test for Utimaco CryptoService. * Unit tests for UtimacoCryptoService (only config parsing). * Integrate Utimaco CryptoService in AbstractNode and NodeConfiguration. * Respond to Feedback: Remove copyright notice. * Respond to PR Feedback: Improve integration test. * Use custom overrides in DriverDSLImpl.startNodeRegistration * Make Utimaco dependencies compileOnly and testCompile. * Add integration test for registering a node that is backed by utimaco HSM. * Respond to feedback: move HsmSimulator to different package. * Make NodeConfiguration.cryptoServiceConf a Path instead of String. * Add Keyfile-based login. * Respond to feedback -- default signing algorithm. * Respond to feedback: naming. * UtimacoNodeRegistrationTest: explicitly verify that tx signature is valid. * Respond to feedback: Static import assertThat. * Rename key file for test login so it's not ignored. 2018-11-22 13:40:50 +00:00			`Configuring the node to use the Utimaco HSM`
			`==================`

			`.. contents::`

			`TODO`
			`-------`