openstack
/
barbican
Code Issues Proposed changes

[doc] Fix hmac/mkek generation commands 

Accidentally wrong lables were copy pasted into the doc. In the meanwhile
labels in sample commands should be the same as used in the sample
configuration block above the generation commands.

Change-Id: I3ddbd086815917cd0c124a88b31333fd366a574c
This commit is contained in:
Dmitriy Rabotyagov 2020-12-25 15:27:18 +02:00 committed by Douglas Mendizábal
parent 5734539d44
commit 7562dda269
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
doc/source/install/barbican-backend.rst
View File

@ -125,7 +125,7 @@ The PKCS#11 plugin configuration for Luna Network HSM looks like:
login = 'mypassword'
# Label to identify master KEK in the HSM (must not be the same as HMAC label)
mkek_label = 'an_mkek'
mkek_label = 'my_mkek_label'
# Length in bytes of master KEK
mkek_length = 32
@ -135,7 +135,7 @@ The PKCS#11 plugin configuration for Luna Network HSM looks like:
# (Optional) HSM Slot ID that contains the token device to be used.
# (integer value)
#slot_id = 1
slot_id = 1
# Enable Read/Write session with the HSM?
@ -161,12 +161,12 @@ The HMAC and MKEK keys can be generated as follows:
.. code-block:: ini
barbican-manage hsm gen_hmac --library-path /usr/lib/libCryptoki2_64.so \
--passphrase XXX --slot-id 1 --label thales_hmac_0
--passphrase XXX --slot-id 1 --label my_hmac_label
.. code-block:: ini
barbican-manage hsm gen_mkek --library-path /usr/lib/libCryptoki2_64.so \
--passphrase XXX --slot-id 1 --label thales_hmac_0
--passphrase XXX --slot-id 1 --label my_mkek_label
nCipher
+++++++