feat: port legacy TSYS-CA (admin-code PKI + tsys-bits) [#769][#783]

Excluded admin-code/*SECRETS.inc (real Nitrokey HSM PINs in the public source repo) — SECRETS.inc.example template added in their place. Rotation/history-purge ruling pending in #783. legacy-* trees exempt from lint/pointer checks (historical verbatim code). https://projects.knownelement.com/issues/769#note-4152
2026-09-04 07:01:46 -05:00
parent 2eca50490d
commit af7c0f3478
29 changed files with 738 additions and 3 deletions
@@ -0,0 +1,5 @@
+#!/bin/bash
+
+# This resets the counters on the HSM and ensures the PIN is what we want for now.
+sc-hsm-tool --initialize --so-pin 1636511164917894 --pin 712583
+sc-hsm-tool