New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Can we use this for AWS/Azure cloud hsm ? #12

Open

ravinayag opened this issue Nov 5, 2024 · 1 comment

ravinayag commented Nov 5, 2024

Hello,

https://github.com/usmansaleem/besu-pkcs11-plugin/blob/main/docker/volumes/config/pkcs11-softhsm.cfg

How can i leverage this plugin for aws/azure cloudhsm ?

Owner

usmansaleem commented Nov 6, 2024

Hello,

https://github.com/usmansaleem/besu-pkcs11-plugin/blob/main/docker/volumes/config/pkcs11-softhsm.cfg

How can i leverage this plugin for aws/azure cloudhsm ?

I haven't tested it, however, a quick google suggests:

AWS provide PKCS11 libraries for CloudHSM that should technically work. https://docs.aws.amazon.com/cloudhsm/latest/userguide/pkcs11-library.html
Simlarly, Azure also seems to provide a PKCS11 interface for their managed HSM https://learn.microsoft.com/en-us/azure/key-vault/managed-hsm/tls-offload-library

In theory, it should work as the plugin uses Sun PKCS11 provider implementation to load and connect to PKCS11 libraries.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment