NAME

OpenXPKI::Config::Loader - Backend connector to load system config from BLOB

SYNOPSIS

    use OpenXPKI::Config::Loader;

    my $cfg = OpenXPKI::Config::Backend->new(LOCATION => "/usr/local/etc/openxpki/config.oxi");

DESCRIPTION

This connector loads a configuration that was stored / build before with openxpkiadm buildconfig. The configuration can be signed with a PKCS7 signature.

CONFIGURATION

The class requires at minimum the path to the loadable configuration given by the LOCATION parameter.

After initialisation, the sha256 checksum is available in the checksum attribute.

If the file holds a signed configuration, the signer certificate is available in the signer variable.

If ca_certificate_path or ca_certificate_file is set, the signer certificate is validated against those CAs, if none is set, the signature is verified but no chain validation is done!.

Note: Verification currently works only if the chain is included in the signature or the signer is issued by the root (looks like a bug in openssl)