tmkms 0.2.3

Tendermint Key Management System
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66

use abscissa::GlobalConfig;
pub use signatory_yubihsm::yubihsm::*;
use std::{
    process,
    sync::{Mutex, MutexGuard},
};

use config::{provider::yubihsm::YubihsmConfig, KmsConfig};

lazy_static! {
    static ref HSM_CLIENT: Mutex<Client> = Mutex::new(create_hsm_client());
}

/// Get a `Box<yubihsm::Connector>` instantiated via the configuration file
pub fn get_hsm_client() -> MutexGuard<'static, Client> {
    HSM_CLIENT.lock().unwrap()
}

/// Get a `yubihsm::Client` configured from the global configuration
fn create_hsm_client() -> Client {
    let connector = create_hsm_connector();
    let credentials = get_config().auth.credentials();

    Client::open(connector, credentials, true).unwrap_or_else(|e| {
        status_err!("error connecting to YubiHSM2: {}", e);
        process::exit(1);
    })
}

/// Get the YubiHSM-related configuration
pub fn get_config() -> YubihsmConfig {
    let kms_config = KmsConfig::get_global();
    let yubihsm_configs = &kms_config.providers.yubihsm;

    if yubihsm_configs.len() != 1 {
        status_err!(
            "expected one [yubihsm.provider] in config, found: {}",
            yubihsm_configs.len()
        );
        process::exit(1);
    }

    yubihsm_configs[0].clone()
}

/// Open a session with the YubiHSM2 using settings from the global config
#[cfg(not(feature = "yubihsm-mock"))]
pub fn create_hsm_connector() -> Box<Connector> {
    // TODO: `HttpConnector` support
    let connector = UsbConnector::new(&get_config().usb_config()).unwrap_or_else(|e| {
        status_err!("error opening USB connection to YubiHSM2: {}", e);
        process::exit(1);
    });

    connector.into()
}

#[cfg(feature = "yubihsm-mock")]
pub fn create_hsm_connector() -> Box<Connector> {
    MOCK_HSM.clone().into()
}

#[cfg(feature = "yubihsm-mock")]
lazy_static! {
    static ref MOCK_HSM: MockHsm = MockHsm::default();
}