Module backend

Backend handling for [NetHsm].

Based on a [NetHsm], AdminCredentials and a HermeticParallelConfig this module offers the ability to populate a [NetHsm] backend with the help of the NetHsmBackend struct.

Using NetHsmBackend::sync all users and keys configured in HermeticParallelConfig are created and adapted to changes upon re-run. With the help of NetHsmBackend::state the current State of a [NetHsm] backend can be created and compared with e.g. the State representation of a HermeticParallelConfig.

Note

This module only works with data for the same iteration (i.e. the iteration of the AdminCredentials and those of the [NetHsm] backend must match).

Structs

KeySetupComparison 🔒

Comparable components of a key setup between a [NetHsm] backend and a Signstar config.

NetHsmBackend

A NetHSM backend that provides full control over its data.

Functions

add_namespace_admins 🔒

Sets up all N-Administrators and their respective namespaces.

add_namespaced_keys 🔒

Sets up all namespaced keys and tags them.

add_namespaced_non_administrative_users 🔒

Sets up all namespaced non-administrative users.

add_namespaced_openpgp_certificates 🔒

Adds OpenPGP certificates for namespaced keys that are used for OpenPGP signing.

add_non_administrative_users 🔒

Sets up all system-wide, non-administrative users based on provided credentials.

add_system_wide_admins 🔒

Creates all R-Administrators on a [NetHsm].

add_system_wide_keys 🔒

Sets up all system-wide keys.

add_system_wide_openpgp_certificates 🔒

Adds OpenPGP certificates for system-wide keys that are used for OpenPGP signing.

compare_key_setups 🔒

Compares the key setups of a key from a Signstar config and that of a NetHSM backend.

get_first_available_namespace_admin 🔒

Retrieves the first available user in the [Administrator][UserRole::Administrator] (N-Administrator) role in a namespace.

get_key_certificate_state 🔒

Retrieve the state of a key certificate.

get_key_states 🔒

Retrieves the state for all keys on a [NetHsm] backend.

get_user_states 🔒

Retrieves the state for all users on a [NetHsm] backend.