Files
git.stella-ops.org/etc/rootpack/ru/crypto.profile.yaml
master cef4cb2c5a Add support for ГОСТ Р 34.10 digital signatures
- Implemented the GostKeyValue class for handling public key parameters in ГОСТ Р 34.10 digital signatures.
- Created the GostSignedXml class to manage XML signatures using ГОСТ 34.10, including methods for computing and checking signatures.
- Developed the GostSignedXmlImpl class to encapsulate the signature computation logic and public key retrieval.
- Added specific key value classes for ГОСТ Р 34.10-2001, ГОСТ Р 34.10-2012/256, and ГОСТ Р 34.10-2012/512 to support different signature algorithms.
- Ensured compatibility with existing XML signature standards while integrating ГОСТ cryptography.
2025-11-09 21:59:57 +02:00

44 lines
1.3 KiB
YAML

StellaOps:
Crypto:
Registry:
ActiveProfile: ru-offline
PreferredProviders:
- default
Profiles:
ru-offline:
PreferredProviders:
- ru.cryptopro.csp
- ru.openssl.gost
- ru.pkcs11
CryptoPro:
Keys:
- KeyId: ru-csp-default
Algorithm: GOST12-256
ProviderName: "Crypto-Pro GOST R 34.10-2012 Cryptographic Service Provider"
CertificateThumbprint: "<thumbprint>"
CertificateStoreLocation: LocalMachine
CertificateStoreName: My
ContainerName: CN=RootPack Signing
Pkcs11:
Keys:
- KeyId: ru-token-default
Algorithm: GOST12-256
LibraryPath: /usr/local/lib/librutokenecp.so
SlotId: "0x1"
Pin: "${PKCS11_PIN}"
PrivateKeyLabel: rootpack-signing
CertificateThumbprint: "<thumbprint>"
OpenSsl:
Keys:
- KeyId: ru-openssl-default
Algorithm: GOST12-256
PrivateKeyPath: /opt/stellaops/keys/ru_openssl_priv.pem
PrivateKeyPassphraseEnvVar: RU_OPENSSL_PRIV_PASS
CertificatePath: /opt/stellaops/certs/ru_openssl_cert.pem
SignatureFormat: Der
Diagnostics:
Providers:
Enabled: true
Metrics:
LogLevel: Information