mirrors/fdroidserver
1
0
Fork 0
mirror of https://github.com/f-droid/fdroidserver.git synced 2025-09-13 22:42:29 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

'smartcardoptions' config item for setting up HSMs with fdroid

Browse source 
These options are needed to configure Java's keytool and jarsigner to use
a Hardware Security Module aka HSM aka smartcard.  The defaults provided
are meant to make things work as easily as possible.
This commit is contained in:
Hans-Christoph Steiner 2014-04-03 22:07:45 -04:00
parent 0950cdac09
commit 2bd62239f7
3 changed files with 28 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

16
examples/config.py
View file

@ -59,9 +59,19 @@ of applications from the main repository.
# jarsigner using -alias. (Not needed in an unsigned repository).
#repo_keyalias = "fdroidrepo"
#The keystore to use for release keys when building. This needs to be
#somewhere safe and secure, and backed up!
#keystore = "/home/me/.local/share/fdroidserver/keystore.jks"
# The keystore to use for release keys when building. This needs to be
# somewhere safe and secure, and backed up! The best way to manage these
# sensitive keys is to use a "smartcard" (aka Hardware Security Module). To
# configure FDroid to use a smartcard, set the keystore file using the keyword
# "NONE" (i.e. keystore = "NONE"). That makes Java find the keystore on the
# smartcard based on 'smartcardoptions' below.
#keystore = "~/.local/share/fdroidserver/keystore.jks"
# You should not need to change these at all, unless you have a very
# customized setup for using smartcards in Java with keytool/jarsigner
#smartcardoptions = "-storetype PKCS11 -providerName SunPKCS11-OpenSC \
# -providerClass sun.security.pkcs11.SunPKCS11 \
# -providerArg opensc-fdroid.cfg"
# The password for the keystore (at least 6 characters). If this password is
# different than the keypass below, it can be OK to store the password in this