mirror of
https://github.com/ibm-s390-linux/s390-tools.git
synced 2026-08-05 02:14:52 +00:00
c56aea0fa9
Authentication with KMIP servers is based on TLS client authentication. To establish trust between zkey and the KMIP server, a client certificate must be registered with the KMIP server before a client can communicate with it. The signature key of the client's certificate is a secure key created by zkey. It can either be an RSA or an ECC key, using either CCA or EP11 type crypto adapters configured with the KMIP plugin. Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com> Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>