make-softhsm.sh

#!/bin/bash
#
# Run this script to generate a SoftHSM config and import test-ca.key to use
# with Boulder. Note that we don't check in the generated config or database
# because they require absolute paths.
#

if [ -r /proc/brcm_monitor0 ]; then
  echo "The /proc/brcm_monitor0 file has open permissions. Please run"
  echo " # chmod 600 /proc/brcm_monitor0"
  echo "as root to avoid crashing the system."
  echo https://bugs.launchpad.net/ubuntu/+source/bcmwl/+bug/1450825
  exit 2
fi

cd $(dirname $0)
export SOFTHSM2_CONF=$PWD/softhsm2.conf
mkdir -p $PWD/softhsm2-tokens
echo "directories.tokendir = $PWD/softhsm2-tokens" > ${SOFTHSM2_CONF}
softhsm2-util --slot 0 --init-token --label intermediate --pin 5678 --so-pin 1234
softhsm2-util --slot 0 --import test-ca.key  --label intermediate_key --pin 5678 --id FB
softhsm2-util --slot 1 --init-token --label root --pin 5678 --so-pin 1234
softhsm2-util --slot 1 --import test-root.key  --label root_key --pin 5678 --id FA
echo
echo "Add this to your .bashrc:"
echo "export SOFTHSM2_CONF=${SOFTHSM2_CONF}"
echo "And edit test/test-ca.key-pkcs11.json and test/test-root.key-pkcs11.json to have:"
echo '"module": "/usr/lib/softhsm/libsofthsm2.so"'