usmansaleem

#! /bin/bash
set -euo pipefail

export CLOUDSMITH_API_KEY=YOUR_CS_API_KEY

repo="https://consensys.bintray.com/pegasys-repo/tech/pegasys/ethsigner/internal"
declare -a versions=("0.2.0" "0.3.0" "0.3.1-SNAPSHOT" "0.4.1-SNAPSHOT" "0.5.0" "0.5.1-SNAPSHOT" "0.6.0" "0.6.1-SNAPSHOT" "0.7.0" "0.7.1-SNAPSHOT" "0.7.1" "0.7.2-SNAPSHOT" "20.10.0" "20.10.1-SNAPSHOT")
declare -a packages=("app" "azure" "commandline" "common" "core" "file-based" "hashicorp" "multifile-based" "multikey" "multiplatform" "raw" "signing-api" "subcommands")

ENV_DIR=./build/tmp/cloudsmith-env

usmansaleem

/*
 * Copyright 2020 ConsenSys AG.
 *
 * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with
 * the License. You may obtain a copy of the License at
 *
 * http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on
 * an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the

usmansaleem

• Total objects that can be stored = 256
• Object ID (in hex) between 0000 and ffff

Add new authentication key (id: 3) for opaque data management

> ./yubihsm-shell --connector=http://localhost:12345 --authkey=1 \
--action=put-authentication-key --new-password=password3 --object-id=3 --domains=1,2,3 \
--capabilities=get-opaque,put-opaque,delete-opaque,export-wrapped,get-pseudo-random,put-wrap-key,import-wrapped \
--delegated=exportable-under-wrap,export-wrapped,import-wrapped

usmansaleem

static void crash() {
    try {
      final Field f = Unsafe.class.getDeclaredField("theUnsafe");
      f.setAccessible(true);
      final Unsafe unsafe = (Unsafe) f.get(null);
      unsafe.putAddress(0, 0);
    } catch (final NoSuchFieldException | IllegalAccessException e) {
      throw new RuntimeException(e);
    }
 }

usmansaleem

OkHttpClient getTlsEnabledOkHttpClient() {
    try {
      final KeyStore keyStore = KeyStore.getInstance("pkcs12");
      try (final InputStream keystoreStream =
          ClassLoader.getSystemResource(KEYSTORE_RESOURCE).openStream()) {
        keyStore.load(keystoreStream, "changeit".toCharArray());
      } catch (IOException e) {
        throw new RuntimeException("Unable to load keystore.", e);
      }

usmansaleem

keytool -genkeypair -keystore rpc_keystore.pfx -storetype PKCS12 -storepass changeit -alias testrpcserver -keyalg RSA -keysize 2048 -validity 109500 -dname "CN=localhost, OU=PegaSys, O=ConsenSys, L=Brisbane, ST=QLD, C=AU" -ext san=dns:localhost,ip:127.0.0.1

usmansaleem

[Unit]
Description=Usman Saleem Blog - NodeJS Backend
Documentation=https://usmans.info
After=network.target

[Service]
Type=simple
User=blog
WorkingDirectory=/opt/blog-nodejs-ts
ExecStart=/usr/bin/yarn start

usmansaleem

#! /bin/bash

# Initialize Hashicorp vault with KV-V2 secrets enginer mounted at /secret
# Assuming Hashicorp vault is running in docker and jq utility is available to parse json output
# See https://gist.github.com/usmansaleem/891d8b3de03786b89b45e62f97fdefa9 which launches Vault server with TLS support.

# exit when any command fails
set -e

echo "Init Hashicorp vault"

usmansaleem

#! /bin/bash
set -e #exit if any command fails

# Run Hashicorp Vault in server mode with inmem storage and TLS enabled

VAULT_IMAGE="vault:latest"
VAULT_MOUNT="./vault/tls"
mkdir -p "$VAULT_MOUNT"

#Generate SSL certificates

usmansaleem

Keybase proof

I hereby claim:

• I am usmansaleem on github.
• I am usmansaleem (https://keybase.io/usmansaleem) on keybase.
• I have a public key ASAm2n8THjDDTNeCFXMlzighk7rsghGGkN0X6ssgQNJFmAo

To claim this, I am signing this object: