Re: [SignServer-develop] Use keys generated without signserver

[Markus K. <mar...@pr...>]

On 04/20/2017 12:17 PM, Arnaud Defos wrote:
> Is it possible to generate keys in another application and use it in
> signserver ?
> 
> It seems that it is not possible with signserver 3.7.0, maybe I miss
> something.
> 

Hi Arnaud,

You can generate key-pairs using other applications but the new keys
might not be available directly to SignServer and it might require the
application server to be restarted.

Specifically for keys stored in an HSM the objects needs to be following
the Sun PKCS#11 provider's key store reqirement:
https://docs.oracle.com/javase/8/docs/technotes/guides/security/p11guide.html#KeyStoreRestrictions


Cheers,
Markus
PrimeKey Solutions


Save time and money with an Enterprise support subscription. Please see
www.primekey.com for more information.
https://www.primekey.com/products/software/