98e6b76584
Some checks failed
AOC Guard CI / aoc-guard (push) Has been cancelled
AOC Guard CI / aoc-verify (push) Has been cancelled
Concelier Attestation Tests / attestation-tests (push) Has been cancelled
Docs CI / lint-and-preview (push) Has been cancelled
Policy Lint & Smoke / policy-lint (push) Has been cancelled
Scanner Analyzers / Discover Analyzers (push) Has been cancelled
Scanner Analyzers / Build Analyzers (push) Has been cancelled
Scanner Analyzers / Test Language Analyzers (push) Has been cancelled
Scanner Analyzers / Validate Test Fixtures (push) Has been cancelled
Scanner Analyzers / Verify Deterministic Output (push) Has been cancelled
wine-csp-build / Build Wine CSP Image (push) Has been cancelled
- Implemented PqSoftCryptoProvider for software-only post-quantum algorithms (Dilithium3, Falcon512) using BouncyCastle. - Added PqSoftProviderOptions and PqSoftKeyOptions for configuration. - Created unit tests for Dilithium3 and Falcon512 signing and verification. - Introduced EcdsaPolicyCryptoProvider for compliance profiles (FIPS/eIDAS) with explicit allow-lists. - Added KcmvpHashOnlyProvider for KCMVP baseline compliance. - Updated project files and dependencies for new libraries and testing frameworks.
41 lines
1.1 KiB
Bash
41 lines
1.1 KiB
Bash
# Findings Ledger - Production Environment
|
|
# Secrets should be injected from secrets manager, not committed
|
|
|
|
# Database connection (inject from secrets manager)
|
|
# LEDGER__DB__CONNECTIONSTRING=
|
|
|
|
# Attachment encryption key (inject from secrets manager)
|
|
# LEDGER__ATTACHMENTS__ENCRYPTIONKEY=
|
|
|
|
# Merkle anchor signing (inject from secrets manager)
|
|
# LEDGER__MERKLE__SIGNINGKEY=
|
|
|
|
# Authority service endpoint
|
|
LEDGER__AUTHORITY__BASEURL=http://authority:8080
|
|
|
|
# Logging level
|
|
Logging__LogLevel__Default=Warning
|
|
Logging__LogLevel__Microsoft=Warning
|
|
Logging__LogLevel__StellaOps=Information
|
|
|
|
# Feature flags
|
|
LEDGER__FEATURES__ENABLEATTACHMENTS=true
|
|
LEDGER__FEATURES__ENABLEAUDITLOG=true
|
|
|
|
# Observability
|
|
LEDGER__OBSERVABILITY__ENABLED=true
|
|
LEDGER__OBSERVABILITY__METRICSPORT=9090
|
|
|
|
# Merkle anchoring
|
|
LEDGER__MERKLE__ANCHORINTERVAL=00:05:00
|
|
LEDGER__MERKLE__EXTERNALIZE=false
|
|
|
|
# Attachments
|
|
LEDGER__ATTACHMENTS__MAXSIZEBYTES=104857600
|
|
LEDGER__ATTACHMENTS__ALLOWEGRESS=false
|
|
|
|
# Air-gap staleness thresholds (seconds)
|
|
LEDGER__AIRGAP__ADVISORYSTALETHRESHOLD=604800
|
|
LEDGER__AIRGAP__VEXSTALETHRESHOLD=604800
|
|
LEDGER__AIRGAP__POLICYSTALETHRESHOLD=86400
|