/* 01comp_sec_key_db.cdf - Secure Key DB configuration file */

/*
 * Copyright (c) 2006-2009 Wind River Systems, Inc.
 *
 * The right to copy, distribute or otherwise make use of this software
 * may be licensed only pursuant to the terms of an applicable Wind River
 * license agreement. No license to Wind River intellectual property rights
 * is granted herein. All rights not licensed by Wind River are reserved
 * by Wind River.
 */

/*
modification history
--------------------
*/

Folder KEY_DATABASE {
   NAME            Key Database
   SYNOPSIS        Key Database
   CHILDREN        INCLUDE_IPCOM_USE_KEY_DB \
   		   INCLUDE_IPCRYPTO_USE_KEY_DB_EXAMPLE_KEYS \
                   INCLUDE_IPCOM_KEY_DB_CMD
}

Component INCLUDE_IPCOM_USE_KEY_DB {
    NAME            IPCOM key database support
    SYNOPSIS        The IPCOM key database stores keys in encrypted format. \
    		    Please note that the IPCOM_KEY_DB_KEY_ENCRYPTING_KEY parameter \
		    must be explicitly set.
    MODULES         ipcom_key_db.o
    LINK_SYMS       ipcom_key_db_buf_get
    CFG_PARAMS      IPCOM_KEY_DB_KEY_ENCRYPTING_KEY IPCOM_KEY_DB_FILE_ROOT
}

Component INCLUDE_IPCRYPTO_USE_KEY_DB_EXAMPLE_KEYS {
    NAME            IPCOM key database example keys
    SYNOPSIS        Example RSA and DSA keys to use for demos and testing. Must not be    \
    		    used in deployed systems.
    REQUIRES	    INCLUDE_IPCOM_USE_KEY_DB
}

Component INCLUDE_IPCOM_KEY_DB_CMD {
    NAME            IPCOM key database shell command
    SYNOPSIS        Shell command to manipulate the IPCOM key database.
    REQUIRES	    INCLUDE_IPCOM_USE_KEY_DB INCLUDE_IPCOM_SHELL_CMD
}

Parameter IPCOM_KEY_DB_KEY_ENCRYPTING_KEY {
    NAME        Key Encrypting Key
    SYNOPSIS    Key used to encrypt keys in the IPCOM key database. \
    		This parameter should be set to a random string of at least 40 characters, \
		containing both lower and upper case, numbers and special characters. \
		IPCOM_KEY_DB_KEY_ENCRYPTING_KEY has no default value on purpose. This \
		will force each customer to set a unique value.
    TYPE        char *
}

Parameter IPCOM_KEY_DB_FILE_ROOT {
    NAME        Key DB file root
    SYNOPSIS    Top directory where the key DB directory structure shall be created. \
    		For backwards compatibility reasons the default \
		value is set to /ram. In deployed systems the key db file root would
		be set to a directory in a persistent file system, e.g. /flash
    TYPE        char *
    DEFAULT	"/ram"
}