NAME

OpenXPKI::Connector::Secret;

DESCRIPTION

Connector to load secrets from the OpenXPKI secret module as defined in crypto.secret. Note that you need set the attribute export: 1 in the secret's 'definition to use this connector.

Configuration

LOCATION: The name of the secret group to load. If set to the empty string, the name of the group is expected as path argument.

Example

Static secret group

When accessing certificate_key_password, the argument string empty and the location attribute is used as group name.

  certificate_key_password@: connector:secret

  secret:
     class: OpenXPKI::Connector::Secret
     LOCATION: my-secret-group

Dynamic secret group

Use to determine the secret group by the path argument, to get the same result as above, you need to call "get('my-secret-group')".

  passwords@: connector:secret

  secret:
     class: OpenXPKI::Connector::Secret
     LOCATION: ''