This is a web service that reveals an API for signing messages with a key stored securely in an HSM module. For testing, SoftHSM may be used.
This signer is modeled largely after this Python Remote Signer
Initialize a token in a test SoftHSM environment. This command will prompt you to set a Security Officer (SO) PIN and a user PIN. The User PIN will be needed by the application at runtime to log in to the PKCS11 sessions and carry out operations. The Application should not need the SO password, but it will be needed to make changes / updates to the token.
softhsm2-util --init-token --slot 0 --label Test1
# Note the new Slot ID # and also the corresponding
# hex (0xAAAAA) number from the below command
softhsm2-util --show-slots
# Import the test privat key
softhsm2-util --import test/keys/testprivkey.pem --slot [SLOTID] --label Test1 --id [AAAAA]
# If you need stack: brew install stack on OS X
stack build
# Run the web server
stack exec server
- ASN.1 PKCS8 Format: https://tools.ietf.org/html/rfc5208
- ASN.1 EC Format: https://tools.ietf.org/html/rfc5915