Example bash script

The bash script demonstrates the bash interface of YubiHSM2.

Requirement

To run the script the following preparations must be made:

• Install:
  • OpenSSL
  • YubiHSM-Shell
  • YubiHSM OpenSSL engine
• An YubiHSM2 hardware in facktory reset state

Warning

...do not use the script for a productive HSM!

Run the script

Enter:

sudo ./demo_script.sh

With more output enter:

sudo -x demo_script.sh

Directories

• /configs/[issue|root]_ca/ - the configuration files of the ca
• /functions - the bash (sub-)scripts
• /tmp - the place of logs, certifikats, csr and other generated things.

Helpful documentation

• OpenSSL with pkcs11 engine
• yubihsm-shell on GitHub