Name

OpenXPKI::Crypto::Backend::OpenSSL::Engine::AWSCloudHSM

Description

This class implements an interface for the AWS Cloud HSM using the dynamic engine driver and the fake key files. The credentials for the HSM must be set via the environment from outside OpenXPKI as documented by AWS.

This class sets "-engine cloudhsm" and forces the internal password to be undef, it does not support any additional engine parameters.

Configuration

Set engine: AWSCloudHSM and set the key attribute to point to the fake-key file (supports local file or datapool as with plain OpenSSL software keys).

Functions