signing-key.yml.example (946B)
1 # Signing key of the SWIYU verifier. 2 # 3 # Copy to /etc/swiyu-verifier/secrets/signing-key.yml, replace the key below 4 # with the private key that belongs to the verification method published in 5 # your verifier's DID document, and keep the file mode 0640 owned by 6 # root:swiyu-verifier (which the package's tmpfiles entry re-applies). 7 # 8 # The block scalar below ("|") is what makes the multi-line PEM work. This 9 # cannot go into swiyu-verifier.env: a systemd EnvironmentFile has no way to 10 # express a newline inside a value. 11 # 12 # After editing: systemctl restart swiyu-verifier 13 14 application: 15 signing_key: | 16 -----BEGIN EC PRIVATE KEY----- 17 REPLACE THIS WITH YOUR OWN KEY -- the line above and below have to stay. 18 -----END EC PRIVATE KEY----- 19 20 # For a key held in an HSM, leave the above out and set 21 # SIGNING_KEY_MANAGEMENT_METHOD plus the HSM_* variables in 22 # swiyu-verifier.env instead; those are single-line values and belong there.