EJBCA-CE Docker with HSM on Kubernetes

This article is a mirror of https://jsty.tistory.com/324
There may be updates to the original article.

ejbca-ee can be integrated with HSM.

However, registry.primekey.com is not accessible as it is a paid repository.

So, I implement it using the open source pkcs11-proxy.


hsm-driver-opensc originally tried to implement opensc but failed and replaced it with pkcs11-proxy.


댓글

댓글 쓰기

이 블로그의 인기 게시물

Fix "go get" error "invalid char ':'" when using custom-port.

Korean:  https://jsty.tistory.com/334  We are running gitlab on a non-standard port. A problem occurred recently when I tried to use the go package through the gitlab repository. $ go get https://gitlab.company.com:1234/group/pkg-name go: malformed module path "https:/gitlab.company.com:1234/group/pkg-name": invalid char ':' Related issues: - https://github.com/golang/go/issues/26912 - https://stackoverflow.com/questions/60445266/not-able-to-get-private-go-module-while-having-port-number-in-url I developed a simple service to solve this. It simply generates metadata to find the actual repository. See https://github.com/jc-lab/go-pkg-meta-proxy/
자세한 내용 보기

UEFI development with Go-lang

See demo:  https://ablog.jc-lab.net/352 tinygo has made it possible to develop bare metal firmware such as MCUs with golang. Seeing this possibility, I thought, why not make a UEFI application in Go? I thought about it and implemented it. Development branch : https://github.com/jclab-joseph/tinygo/tree/feat/uefi WIP PR : https://github.com/tinygo-org/tinygo/pull/3996 For traditional EFI development, there is a framework called edk2, but it is complicated to use and it is difficult to use various libraries effectively. For example, I recently tried to implement curl instead of HttpDxe, but when I added the LibC dependency, OpenSsl wouldn't build, etc. There are issues. The biggest difficulty is that it's a C language. Unlike Java and Node.js, golang has the great advantage of being compiled and operated in machine language without the need for a VM, but if you implement platform-specific things well, you can implement cross-platform regardless of OS. That's why UEFI is possi...
자세한 내용 보기