From e28a201c5790fee701d14e3411caa09f0c98a2cc Mon Sep 17 00:00:00 2001 From: Alex Stuart Date: Wed, 22 Jun 2022 16:23:09 +0100 Subject: [PATCH] Add new deployment environment for testing new HSM See ukf/ukf-meta#349 for details --- hv1-happ-001.properties | 23 +++++++++++++++++++++++ mdx/uk/nshield202112.cfg | 4 ++++ 2 files changed, 27 insertions(+) create mode 100644 hv1-happ-001.properties create mode 100644 mdx/uk/nshield202112.cfg diff --git a/hv1-happ-001.properties b/hv1-happ-001.properties new file mode 100644 index 0000000..5aca5a6 --- /dev/null +++ b/hv1-happ-001.properties @@ -0,0 +1,23 @@ +# +# hv1-happ-001.properties +# +# Properties defined for the env=hv1-happ-001 deployment environment. +# +# This is testing the new HSM (installed in December 2021) +# + +# +# Location of the PKCS#11 configuration file for the Thales HSM. +# +sign.uk.pkcs11Config = ${basedir}/mdx/uk/nshield202112.cfg + +# +# Signing key alias within the keystore. +# +sign.uk.keyAlias = UKAMF_Signing_Key + +# +# Give Java processes plenty of headroom in production. +# Update this whenever the value in build.xml is updated. +# +java.max.memory = 2048m diff --git a/mdx/uk/nshield202112.cfg b/mdx/uk/nshield202112.cfg new file mode 100644 index 0000000..a0878d2 --- /dev/null +++ b/mdx/uk/nshield202112.cfg @@ -0,0 +1,4 @@ +library=/opt/nfast/toolkits/pkcs11/libcknfast.so +name=nShield +description=nShield Token +showInfo=true