Module backend 

Backend handling for YubiHSM2.

Using this module, a YubiHSM2 can be synchronized against a Signstar configuration file, describing its desired state.

While the configuration allows for setting up administrative and non-administrative users of the backend in a declarative fashion, there are also certain implicit elements, which this module takes care of. Most notably, the wrap key, used for backups is always stored using the ID 1. Further, certificates created using a specific asymmetric key are always stored as opaque objects using the same ID as the asymmetric key.

Structs

UserMappingsAndCredentials 🔒

A list of user mappings and their credentials for a YubiHSM2.

YubiHsm2Backend

A YubiHSM2 backend that provides control over a YubiHSM2 and its data.

Functions

are_admin_creds_usable 🔒

Return true if given administrative credentials are currently usable.

get_key_ids 🔒

Returns a list of Ids that are of a specific [ObjectType].

get_object_infos_for_object_ids 🔒

Returns a list of [Info] objects for a list of [ObjectId] objects.

get_object_infos_for_object_types 🔒

Returns a list of object infos for a list of object types.