usmansaleem

YubiHSM

• Install YubiHSM tools https://developers.yubico.com/YubiHSM2/Releases/
• Set up a new key (id=3, password=password3) for opaque data management, using the YubiHSM default credentials (authkey=1, password=password)

yubihsm-shell --connector=yhusb:// --authkey=1 --password=password \
--action=put-authentication-key --new-password=password3 --object-id=3 --domains=1,2,3 \
--capabilities=get-opaque,put-opaque,delete-opaque,export-wrapped,get-pseudo-random,put-wrap-key,import-wrapped \
--delegated=exportable-under-wrap,export-wrapped,import-wrapped

usmansaleem

Update apt cache

sudo apt-get update && sudo apt-get -y upgrade

Install dependencies

sudo apt-get install -y git autoconf libpcre3 libpcre3-dev bison flex gcc make gcc-arm-linux-gnueabihf g++-arm-linux-gnueabihf binutils-arm-linux-gnueabihf

usmansaleem

openssl s_client -connect localhost:8200 </dev/null 2>/dev/null | openssl x509 -inform pem -noout -fingerprint

Or

openssl s_client -connect localhost:8200 </dev/null 2>/dev/null | openssl x509 -inform pem -text

usmansaleem

name: "Release"

permissions:
  contents: "write"

on:
  workflow_run:
    workflows: ["Tag"]
    types:
      - "completed"

usmansaleem

Generate Root CA, Web3Signer server and client certificate

This example uses openssl utility to generate custom CA and signs web3signer and client certs and shows how to setup Web3Signer with them. The keytool example can be seen here.

Generate Root CA key pair (CN=root.mycompany.com)

openssl genrsa -out root_ca.key 4096

usmansaleem

Generate Root CA, Web3Signer server and client certificate

This example uses JDK's keytool utility to generate custom CA and signs web3signer and client certs and shows how to setup Web3Signer with them. The openssl example can be seen here.

---

Note: password 123456 is used in these examples

usmansaleem

• Install nvim
• Install Nerd Font

brew tap homebrew/cask-fonts
brew install --cask font-JetBrains-Mono-nerd-font

• Install AstroNVim. From Optional, install ripgrep and python at least.
• Install NeoVide.

usmansaleem

git config --global core.pager "less -F -X"
git config --global push.default current

usmansaleem

https://stackoverflow.com/a/46536244/535610

Save the following as .git/hooks/prepare-commit-msg and make it executable.

#!/bin/sh

NAME=$(git config user.name)
EMAIL=$(git config user.email)

if [ -z "$NAME" ]; then

usmansaleem

Self signed certificate in PKCS12 keystore

Keystore is created using JDK's keytool command (OpenSSL can be used as well). First keystore is required for Web3Signer, second for client (such as Teku or curl). Pay special attention to specify CN for the client keystore/certificate as it is required by knownClients file in Web3Signer.

keytool -genkeypair -keystore web3signer_keystore.p12 -storetype PKCS12 -storepass MY_PASSWORD -alias SOME_ALIAS \
-keyalg RSA -keysize 2048 -validity 700 -dname "CN=localhost, OU=PegaSys, O=ConsenSys, L=Brisbane, ST=QLD, C=AU" \
-ext san=dns:localhost,ip:127.0.0.1