From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Tue, 22 Jun 2021 06:37:08 +0200 Received: from metis.ext.pengutronix.de ([2001:67c:670:201:290:27ff:fe1d:cc33]) by lore.white.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1lvY9s-0003QD-Et for lore@lore.pengutronix.de; Tue, 22 Jun 2021 06:37:08 +0200 Received: from localhost ([127.0.0.1] helo=metis.ext.pengutronix.de) by metis.ext.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1lvY9r-0002z6-UR; Tue, 22 Jun 2021 06:37:07 +0200 Received: from enterprise01.smtp.diehl.com ([193.201.238.219]) by metis.ext.pengutronix.de with esmtps (TLS1.2:DHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1lvY98-0002wp-1z for ptxdist@pengutronix.de; Tue, 22 Jun 2021 06:36:22 +0200 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=diehl.com; i=@diehl.com; q=dns/txt; s=default; t=1624336582; x=1655872582; h=from:to:subject:date:message-id:references:in-reply-to: content-id:content-transfer-encoding:mime-version; bh=qfMSxynY23PQbmyTRA+ri/QPbvYsLsOKaQ2MlSuLJ5o=; b=gAiAxBMQH1FaGAG5zOxsLWoDJ8kd/AB0F7RF/3oPD3yV+7tlXUg4tNXo 93kjLbWtyPYxgX9tFAxLMJYPQBgrIu5z3M/VCwMJlTVwhfsoPX5knB1E4 NBKYEPZ9HRA1vbwcWT1GoXsOWsnEfRRMfC0vZPGdwuLDD6JBFDhCSzy5O tc8xTsDLCuphjJqrSgUd7W2Az0aUBXcAE/au/C1z44KajxOHu3lSisyZ7 5fXvZySOh0kC6gGyZSNZc0K+yM2cSA8L+sSWabWejFoWkLba75qNzdnOH 5qliHoJU6QwxSrB2JB9ygKSbL1/wP9zTCsvz8V0Q+sXEyZihsBZSgwHhW Q==; IronPort-SDR: MIEOWc/J/YSBt/vmBn8AYp0CZNI/C80y39CBJ4tlueArjpAzOwECCOwskXyiR3u6PcKg9lCgjq llxnbsUcvP2xxF/NF/bgQoeMFD3VscNM3eBmzLKtp2ikLRba3LqvllDJ+FvaqhVxQINfbvFsqk KSlWuRS2FHppS8EcMdPvPwR2y8b7d5nOCaizUwYgTjh5NUH6+PeTLy1f87sCzuVWVwm+4G0vcR 9Us6VRM8qO6Km2PyG8Ivm18qeFrxyY0v6WJc2ugoOSZulJdgiB3HNEPsHsQ0aAV0Ep3rMtKpCU Ppk= IronPort-HdrOrdr: A9a23:Xpi2KqyLmu9maFZcCexTKrPwH71zdoMgy1knxilNoEpuA7Wlfq GV7ZEmPX2dslwssRQb9OxoV5PtfZqxz/FICOoqTNWftWvd2FdAd7sSi7cKqgeIc0bDH4hmu5 uIGJIOa+EYY2IasS5UijPIa+rJbLO8gcSVbUa19QYLcT1X X-IronPort-AV: E=Sophos;i="5.83,291,1616454000"; d="scan'208";a="11689233" From: Denis Osterland-Heim To: "ptxdist@pengutronix.de" Thread-Topic: [ptxdist] allow network access to HSM in order to sign Thread-Index: AQHXZtoLc9TqAIgIikaFVb2aKEt5+qsfUQ0A Date: Tue, 22 Jun 2021 04:36:18 +0000 Message-ID: References: <20210621201347.ewjj47rlzi2cqolh@pengutronix.de> In-Reply-To: <20210621201347.ewjj47rlzi2cqolh@pengutronix.de> Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Evolution 3.28.5-0ubuntu0.18.04.2 x-ms-exchange-messagesentrepresentingtype: 1 x-disclaimerprocessed: True Content-ID: <31C409656457354B9CE15FE1FED78E40@diehl.internal> MIME-Version: 1.0 X-GBS-PROC: 415AWy8o668fDtCxszluzyZnsK2PtzTc3QPXCth5ogUSuk1c+mfURC9tUgkSfte7 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.ext.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-105.6 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_HI,SPF_HELO_NONE, SPF_PASS,URIBL_BLOCKED,USER_IN_WELCOMELIST,USER_IN_WHITELIST autolearn=ham autolearn_force=no version=3.4.2 Subject: Re: [ptxdist] allow network access to HSM in order to sign X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.ext.pengutronix.de); SAEximRunCond expanded to false SGkgTWFyYywNCg0KUGxlYXNlIGhhdmUgYSBsb29rIGF0IGh0dHBzOi8vZ2l0LnBlbmd1dHJvbml4 LmRlL2NnaXQvcHR4ZGlzdC9jb21taXQvP2lkPTRiM2JlODIyNWYzODljN2RiMGUyZDY2NWU4ZTYw MGNiMmNmNTJiOTEgLg0KVGhpcyBzaG91bGQgYW5zd2VyIHlvdXIgcXVlc3Rpb24uDQoNClJlZ2Fy ZHMsIERlbmlzDQoNCkFtIE1vbnRhZywgZGVuIDIxLjA2LjIwMjEsIDIyOjEzICswMjAwIHNjaHJp ZWIgTWFyYyBLbGVpbmUtQnVkZGU6DQo+IEhlbGxvIE1pY2hhZWwsDQo+DQo+IHNpbmNlIGNvbW1p dDoNCj4NCj4gPiBhYjRhZjQ4YmE0MDMgcHR4ZF9tYWtlX3dvcmxkX2luaXQ6IHRyeSB0byBwcmV2 ZW50IGRvd25sb2FkcyBvdXRzaWRlIHRoZSBnZXQgc3RhZ2UNCj4NCj4gc2lnbmluZyB1c2luZyBh IEhTTSBkb2Vzbid0IHdvcmsgYW55bW9yZSwgYXMgdGhlIHNpZ25pbmcgY2xpZW50DQo+IGV2YWx1 YXRlZCB0aGUgaHR0cHNfcHJveHkgdmFyaWFibGUuDQo+DQo+IHJlZ2FyZHMsDQo+IE1hcmMNCj4N Cj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gcHR4 ZGlzdCBtYWlsaW5nIGxpc3QNCj4gcHR4ZGlzdEBwZW5ndXRyb25peC5kZQ0KPiBUbyB1bnN1YnNj cmliZSwgc2VuZCBhIG1haWwgd2l0aCBzdWJqZWN0ICJ1bnN1YnNjcmliZSIgdG8gcHR4ZGlzdC1y ZXF1ZXN0QHBlbmd1dHJvbml4LmRlDQpEaWVobCBDb25uZWN0aXZpdHkgU29sdXRpb25zIEdtYkgN Ckdlc2Now6RmdHNmw7xocnVuZzogSG9yc3QgTGVvbmJlcmdlcg0KU2l0eiBkZXIgR2VzZWxsc2No YWZ0OiBOw7xybmJlcmcgLSBSZWdpc3RlcmdlcmljaHQ6IEFtdHNnZXJpY2h0DQpOw7xybmJlcmc6 IEhSQiAzMjMxNQ0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KDQpEZXIgSW5o YWx0IGRlciB2b3JzdGVoZW5kZW4gRS1NYWlsIGlzdCBuaWNodCByZWNodGxpY2ggYmluZGVuZC4g RGllc2UgRS1NYWlsIGVudGhhZWx0IHZlcnRyYXVsaWNoZSB1bmQvb2RlciByZWNodGxpY2ggZ2Vz Y2h1ZXR6dGUgSW5mb3JtYXRpb25lbi4NCkluZm9ybWllcmVuIFNpZSB1bnMgYml0dGUsIHdlbm4g U2llIGRpZXNlIEUtTWFpbCBmYWVsc2NobGljaGVyd2Vpc2UgZXJoYWx0ZW4gaGFiZW4uIEJpdHRl IGxvZXNjaGVuIFNpZSBpbiBkaWVzZW0gRmFsbCBkaWUgTmFjaHJpY2h0Lg0KSmVkZSB1bmVybGF1 YnRlIEZvcm0gZGVyIFJlcHJvZHVrdGlvbiwgQmVrYW5udGdhYmUsIEFlbmRlcnVuZywgVmVydGVp bHVuZyB1bmQvb2RlciBQdWJsaWthdGlvbiBkaWVzZXIgRS1NYWlsIGlzdCBzdHJlbmdzdGVucyB1 bnRlcnNhZ3QuDQoNCi0gSW5mb3JtYXRpb25lbiB6dW0gRGF0ZW5zY2h1dHosIGluc2Jlc29uZGVy ZSB6dSBJaHJlbiBSZWNodGVuLCBlcmhhbHRlbiBTaWUgdW50ZXI6DQoNCmh0dHBzOi8vd3d3LmRp ZWhsLmNvbS9ncm91cC9kZS90cmFuc3BhcmVuei11bmQtaW5mb3JtYXRpb25zcGZsaWNodGVuLw0K DQpUaGUgY29udGVudHMgb2YgdGhlIGFib3ZlIG1lbnRpb25lZCBlLW1haWwgaXMgbm90IGxlZ2Fs bHkgYmluZGluZy4gVGhpcyBlLW1haWwgY29udGFpbnMgY29uZmlkZW50aWFsIGFuZC9vciBsZWdh bGx5IHByb3RlY3RlZCBpbmZvcm1hdGlvbi4gUGxlYXNlIGluZm9ybSB1cyBpZiB5b3UgaGF2ZSBy ZWNlaXZlZCB0aGlzIGUtbWFpbCBieQ0KbWlzdGFrZSBhbmQgZGVsZXRlIGl0IGluIHN1Y2ggYSBj YXNlLiBFYWNoIHVuYXV0aG9yaXplZCByZXByb2R1Y3Rpb24sIGRpc2Nsb3N1cmUsIGFsdGVyYXRp b24sIGRpc3RyaWJ1dGlvbiBhbmQvb3IgcHVibGljYXRpb24gb2YgdGhpcyBlLW1haWwgaXMgc3Ry aWN0bHkgcHJvaGliaXRlZC4NCg0KLSBGb3IgZ2VuZXJhbCBpbmZvcm1hdGlvbiBvbiBkYXRhIHBy b3RlY3Rpb24gYW5kIHlvdXIgcmVzcGVjdGl2ZSByaWdodHMgcGxlYXNlIHZpc2l0Og0KDQpodHRw czovL3d3dy5kaWVobC5jb20vZ3JvdXAvZW4vdHJhbnNwYXJlbmN5LWFuZC1pbmZvcm1hdGlvbi1v YmxpZ2F0aW9ucy8NCg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXwpwdHhkaXN0IG1haWxpbmcgbGlzdApwdHhkaXN0QHBlbmd1dHJvbml4LmRlClRvIHVu c3Vic2NyaWJlLCBzZW5kIGEgbWFpbCB3aXRoIHN1YmplY3QgInVuc3Vic2NyaWJlIiB0byBwdHhk aXN0LXJlcXVlc3RAcGVuZ3V0cm9uaXguZGUK