up

config/crypto-profiles.sample.json

@@ -0,0 +1,34 @@
+{
+  "StellaOps": {
+    "Crypto": {
+      "Registry": {
+        "ActiveProfile": "world",
+        "PreferredProviders": [ "default" ],
+        "Profiles": {
+          "ru-free": { "PreferredProviders": [ "ru.openssl.gost", "ru.pkcs11", "sim.crypto.remote" ] },
+          "ru-paid": { "PreferredProviders": [ "ru.cryptopro.csp", "ru.openssl.gost", "ru.pkcs11", "sim.crypto.remote" ] },
+          "sm": { "PreferredProviders": [ "cn.sm.soft", "sim.crypto.remote" ] },
+          "eidas": { "PreferredProviders": [ "eu.eidas.soft", "sim.crypto.remote" ] },
+          "fips": { "PreferredProviders": [ "fips.ecdsa.soft", "sim.crypto.remote" ] },
+          "kcmvp": { "PreferredProviders": [ "kr.kcmvp.hash", "sim.crypto.remote" ] },
+          "pq": { "PreferredProviders": [ "pq.soft", "sim.crypto.remote" ] }
+        }
+      },
+      "Sim": {
+        "BaseAddress": "http://localhost:8080"
+      },
+      "CryptoPro": {
+        "Keys": [],
+        "LicenseNote": "Customer-provided CryptoPro CSP .deb packages; set CRYPTOPRO_ACCEPT_EULA=1; Linux only."
+      },
+      "Pkcs11": {
+        "LibraryPath": "/usr/lib/pkcs11/lib.so",
+        "Keys": []
+      }
+    },
+    "Compliance": {
+      "ProfileId": "world",
+      "StrictValidation": true
+    }
+  }
+}

config/env/.env.eidas.example

@@ -0,0 +1,8 @@
+STELLAOPS_CRYPTO_COMPLIANCE_PROFILE=eidas
+STELLAOPS__CRYPTO__REGISTRY__ACTIVEPROFILE=eidas
+EIDAS_SOFT_ALLOWED=1
+# QSCD PKCS#11 path + PIN when hardware is available:
+# STELLAOPS__CRYPTO__PKCS11__LIBRARYPATH=/usr/lib/qscd/libpkcs11.so
+# EIDAS_QSCD_PIN=changeme
+STELLAOPS_CRYPTO_ENABLE_SIM=1
+STELLAOPS_CRYPTO_SIM_URL=http://localhost:8080

config/env/.env.fips.example

@@ -0,0 +1,6 @@
+STELLAOPS_CRYPTO_COMPLIANCE_PROFILE=fips
+STELLAOPS__CRYPTO__REGISTRY__ACTIVEPROFILE=fips
+FIPS_SOFT_ALLOWED=1
+# Optional: AWS_USE_FIPS_ENDPOINTS=true
+STELLAOPS_CRYPTO_ENABLE_SIM=1
+STELLAOPS_CRYPTO_SIM_URL=http://localhost:8080

config/env/.env.kcmvp.example

@@ -0,0 +1,5 @@
+STELLAOPS_CRYPTO_COMPLIANCE_PROFILE=kcmvp
+STELLAOPS__CRYPTO__REGISTRY__ACTIVEPROFILE=kcmvp
+KCMVP_HASH_ALLOWED=1
+STELLAOPS_CRYPTO_ENABLE_SIM=1
+STELLAOPS_CRYPTO_SIM_URL=http://localhost:8080

config/env/.env.ru-free.example

@@ -0,0 +1,6 @@
+STELLAOPS_CRYPTO_COMPLIANCE_PROFILE=gost
+STELLAOPS__CRYPTO__REGISTRY__ACTIVEPROFILE=ru-free
+STELLAOPS_CRYPTO_ENABLE_RU_OPENSSL=1
+STELLAOPS_RU_OPENSSL_REMOTE_URL=
+STELLAOPS_CRYPTO_ENABLE_SIM=1
+STELLAOPS_CRYPTO_SIM_URL=http://localhost:8080

config/env/.env.ru-paid.example

@@ -0,0 +1,7 @@
+STELLAOPS_CRYPTO_COMPLIANCE_PROFILE=gost
+STELLAOPS__CRYPTO__REGISTRY__ACTIVEPROFILE=ru-paid
+STELLAOPS_CRYPTO_ENABLE_RU_CSP=1
+CRYPTOPRO_ACCEPT_EULA=1
+# Bind customer-provided debs to /opt/cryptopro/downloads inside the service container.
+STELLAOPS_CRYPTO_ENABLE_SIM=1
+STELLAOPS_CRYPTO_SIM_URL=http://localhost:8080

config/env/.env.sm.example

@@ -0,0 +1,6 @@
+STELLAOPS_CRYPTO_COMPLIANCE_PROFILE=sm
+STELLAOPS__CRYPTO__REGISTRY__ACTIVEPROFILE=sm
+SM_SOFT_ALLOWED=1
+STELLAOPS_CRYPTO_ENABLE_SM_PKCS11=0
+STELLAOPS_CRYPTO_ENABLE_SIM=1
+STELLAOPS_CRYPTO_SIM_URL=http://localhost:8080