ExternalVendorCode/corda
1
0
Fork 0
mirror of https://github.com/corda/corda.git synced 2025-04-09 04:15:35 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Merge pull request #7695 from corda/shams-eddsa-service-keys

Browse Source 
ENT-11662: Use EdDSA when generating notary service identities
This commit is contained in:
Adel El-Beik 2024-03-20 12:10:10 +00:00 committed by GitHub
commit 0849f91d45
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 12 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
node/src/main/kotlin/net/corda/node/utilities/registration/NetworkRegistrationHelper.kt
View File

@ -121,8 +121,11 @@ open class NetworkRegistrationHelper(
requestIdStore.deleteIfExists()
}
private fun generateKeyPairAndCertificate(keyAlias: String, legalName: CordaX500Name, certificateRole: CertRole, certStore: CertificateStore): Pair<PublicKey, List<X509Certificate>> {
val entityPublicKey = loadOrGenerateKeyPair(keyAlias)
private fun generateKeyPairAndCertificate(keyAlias: String,
legalName: CordaX500Name,
certificateRole: CertRole,
certStore: CertificateStore): Pair<PublicKey, List<X509Certificate>> {
val entityPublicKey = loadOrGenerateKeyPair(keyAlias, certificateRole)
val requestId = submitOrResumeCertificateSigningRequest(entityPublicKey, legalName, certificateRole, cryptoService.getSigner(keyAlias))
@ -209,11 +212,16 @@ open class NetworkRegistrationHelper(
logProgress("Node identity private key and certificate chain stored in $nodeIdentityAlias.")
}
private fun loadOrGenerateKeyPair(keyAlias: String): PublicKey {
private fun loadOrGenerateKeyPair(keyAlias: String, certificateRole: CertRole): PublicKey {
return if (cryptoService.containsKey(keyAlias)) {
cryptoService.getPublicKey(keyAlias)!!
} else {
cryptoService.generateKeyPair(keyAlias, cryptoService.defaultTLSSignatureScheme())
val signatureScheme = if (certificateRole == CertRole.SERVICE_IDENTITY) {
cryptoService.defaultIdentitySignatureScheme()
} else {
cryptoService.defaultTLSSignatureScheme()
}
cryptoService.generateKeyPair(keyAlias, signatureScheme)
}
}