rpm/parsec
SHA256
1
0
Fork 0
forked from pool/parsec
Code Pull Requests Activity
6a4bb3e5bb
parsec/config.toml

41 lines
945 B
TOML
Raw Normal View History

Accepting request 882567 from home:Guillaume_G:branches:security - Make 'parsec' user part of 'tss' group to access /dev/tpm* devices - Update to 0.7.2: * Changelog: https://github.com/parallaxsecond/parsec/compare/0.6.0...0.7.2 - Recommends 'softhsm' as it is used by PKCS#11 backend - Recommends 'opensc' as it is used to initialize HSM keys (PKCS#11 backend) - Add PKCS#11 template (disabled) in config.toml - Disable Tpm backend by default in config.toml OBS-URL: https://build.opensuse.org/request/show/882567 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=5
2021-04-01 15:00:44 +02:00
# See a more complete example in /usr/share/doc/packages/parsec/config.toml
Accepting request 844364 from home:Guillaume_G parsec service OBS-URL: https://build.opensuse.org/request/show/844364 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=1
2020-11-03 09:16:41 +01:00
[core_settings]
[listener]
listener_type = "DomainSocket"
timeout = 200 # in milliseconds
[authenticator]
auth_type = "UnixPeerCredentials"
[[key_manager]]
name = "on-disk-manager"
manager_type = "OnDisk"
[[provider]]
provider_type = "MbedCrypto"
key_info_manager = "on-disk-manager"
Accepting request 882567 from home:Guillaume_G:branches:security - Make 'parsec' user part of 'tss' group to access /dev/tpm* devices - Update to 0.7.2: * Changelog: https://github.com/parallaxsecond/parsec/compare/0.6.0...0.7.2 - Recommends 'softhsm' as it is used by PKCS#11 backend - Recommends 'opensc' as it is used to initialize HSM keys (PKCS#11 backend) - Add PKCS#11 template (disabled) in config.toml - Disable Tpm backend by default in config.toml OBS-URL: https://build.opensuse.org/request/show/882567 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=5
2021-04-01 15:00:44 +02:00
#[[provider]]
#provider_type = "Pkcs11"
#key_info_manager = "on-disk-manager"
Accepting request 882706 from home:Guillaume_G:branches:security Drop softhsm references OBS-URL: https://build.opensuse.org/request/show/882706 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=6
2021-04-02 12:08:52 +02:00
#library_path = "/usr/lib64/opensc-pkcs11.so"
Accepting request 882567 from home:Guillaume_G:branches:security - Make 'parsec' user part of 'tss' group to access /dev/tpm* devices - Update to 0.7.2: * Changelog: https://github.com/parallaxsecond/parsec/compare/0.6.0...0.7.2 - Recommends 'softhsm' as it is used by PKCS#11 backend - Recommends 'opensc' as it is used to initialize HSM keys (PKCS#11 backend) - Add PKCS#11 template (disabled) in config.toml - Disable Tpm backend by default in config.toml OBS-URL: https://build.opensuse.org/request/show/882567 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=5
2021-04-01 15:00:44 +02:00
#slot_number = 123456789
#user_pin = "123456"
#software_public_operations = false
#[[provider]]
#provider_type = "Tpm"
#key_info_manager = "on-disk-manager"
#tcti = "device:/dev/tpmrm0"
#owner_hierarchy_auth = ""
Accepting request 885427 from home:Guillaume_G:branches:security - Requires 'tpm2-0-tss' as it holds the udev rule to make /dev/tpm* owned by tss user - Requires 'libtss2-tcti-device0' as it is required to start parsec with TPM support - Enable all authenticators which adds 'direct-authenticator' - Add CryptoAuthLib template (disabled) in config.toml OBS-URL: https://build.opensuse.org/request/show/885427 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=8
2021-04-14 17:57:17 +02:00
Accepting request 960364 from home:Guillaume_G:branches:security - Update to 1.0.0-rc2: * Changelog: https://github.com/parallaxsecond/parsec/compare/1.0.0-rc1...1.0.0-rc2 - Remove CryptoAuthLib (CAL) provider as it is unmaintained. OBS-URL: https://build.opensuse.org/request/show/960364 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=23
2022-03-09 08:35:10 +01:00
# CAL provider and hardware abstraction crate are unmaintained; See #585
Accepting request 885427 from home:Guillaume_G:branches:security - Requires 'tpm2-0-tss' as it holds the udev rule to make /dev/tpm* owned by tss user - Requires 'libtss2-tcti-device0' as it is required to start parsec with TPM support - Enable all authenticators which adds 'direct-authenticator' - Add CryptoAuthLib template (disabled) in config.toml OBS-URL: https://build.opensuse.org/request/show/885427 OBS-URL: https://build.opensuse.org/package/show/security/parsec?expand=0&rev=8
2021-04-14 17:57:17 +02:00
#[[provider]]
#provider_type = "CryptoAuthLib"
#key_info_manager = "on-disk-manager"
#device_type = "atecc508a"
#iface_type = "i2c"
#wake_delay = 1500
#rx_retries = 20
Copy Permalink