- Implemented the GostKeyValue class for handling public key parameters in ГОСТ Р 34.10 digital signatures. - Created the GostSignedXml class to manage XML signatures using ГОСТ 34.10, including methods for computing and checking signatures. - Developed the GostSignedXmlImpl class to encapsulate the signature computation logic and public key retrieval. - Added specific key value classes for ГОСТ Р 34.10-2001, ГОСТ Р 34.10-2012/256, and ГОСТ Р 34.10-2012/512 to support different signature algorithms. - Ensured compatibility with existing XML signature standards while integrating ГОСТ cryptography.
44 lines
1.3 KiB
YAML
44 lines
1.3 KiB
YAML
StellaOps:
|
|
Crypto:
|
|
Registry:
|
|
ActiveProfile: ru-offline
|
|
PreferredProviders:
|
|
- default
|
|
Profiles:
|
|
ru-offline:
|
|
PreferredProviders:
|
|
- ru.cryptopro.csp
|
|
- ru.openssl.gost
|
|
- ru.pkcs11
|
|
CryptoPro:
|
|
Keys:
|
|
- KeyId: ru-csp-default
|
|
Algorithm: GOST12-256
|
|
ProviderName: "Crypto-Pro GOST R 34.10-2012 Cryptographic Service Provider"
|
|
CertificateThumbprint: "<thumbprint>"
|
|
CertificateStoreLocation: LocalMachine
|
|
CertificateStoreName: My
|
|
ContainerName: CN=RootPack Signing
|
|
Pkcs11:
|
|
Keys:
|
|
- KeyId: ru-token-default
|
|
Algorithm: GOST12-256
|
|
LibraryPath: /usr/local/lib/librutokenecp.so
|
|
SlotId: "0x1"
|
|
Pin: "${PKCS11_PIN}"
|
|
PrivateKeyLabel: rootpack-signing
|
|
CertificateThumbprint: "<thumbprint>"
|
|
OpenSsl:
|
|
Keys:
|
|
- KeyId: ru-openssl-default
|
|
Algorithm: GOST12-256
|
|
PrivateKeyPath: /opt/stellaops/keys/ru_openssl_priv.pem
|
|
PrivateKeyPassphraseEnvVar: RU_OPENSSL_PRIV_PASS
|
|
CertificatePath: /opt/stellaops/certs/ru_openssl_cert.pem
|
|
SignatureFormat: Der
|
|
Diagnostics:
|
|
Providers:
|
|
Enabled: true
|
|
Metrics:
|
|
LogLevel: Information
|