EJBCA-CE Docker with HSM on Kubernetes

This article is a mirror of https://jsty.tistory.com/324

There may be updates to the original article.

ejbca-ee can be integrated with HSM.

> https://github.com/Keyfactor/ejbca-containers/blob/master/hsm-integration/hsm-drivers/hsm-driver-softhsm/Containerfile

However, registry.primekey.com is not accessible as it is a paid repository.

So, I implement it using the open source pkcs11-proxy.

See https://gist.github.com/jclab-joseph/973d06db6856a8e5cb851909fbc7268b

And https://github.com/jc-lab/hsm-driver-opensc

hsm-driver-opensc originally tried to implement opensc but failed and replaced it with pkcs11-proxy.