# See a more complete example in /usr/share/doc/packages/parsec/config.toml
[core_settings]

[listener]
listener_type = "DomainSocket"
timeout = 200 # in milliseconds

[authenticator]
auth_type = "UnixPeerCredentials"

[[key_manager]]
name = "on-disk-manager"
manager_type = "OnDisk"

[[provider]]
provider_type = "MbedCrypto"
key_info_manager = "on-disk-manager"

#[[provider]]
#provider_type = "Pkcs11"
#key_info_manager = "on-disk-manager"
#library_path = "/usr/lib64/opensc-pkcs11.so"
#slot_number = 123456789
#user_pin = "123456"
#software_public_operations = false

#[[provider]]
#provider_type = "Tpm"
#key_info_manager = "on-disk-manager"
#tcti = "device:/dev/tpmrm0"
#owner_hierarchy_auth = ""

# CAL provider and hardware abstraction crate are unmaintained; See #585
#[[provider]]
#provider_type = "CryptoAuthLib"
#key_info_manager = "on-disk-manager"
#device_type = "atecc508a"
#iface_type = "i2c"
#wake_delay = 1500
#rx_retries = 20