Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Time out signer requests #643

Open
ximon18 opened this issue Aug 25, 2021 · 2 comments · Fixed by #679
Open

Time out signer requests #643

ximon18 opened this issue Aug 25, 2021 · 2 comments · Fixed by #679
Labels
hsm Relates to adding HSM support to Krill

Comments

@ximon18
Copy link
Member

ximon18 commented Aug 25, 2021

Requests to the signer should not block indefinitely / for a long time as in the case of a remote KMIP HSM the TCP connection could fail or be delayed in interesting ways, or in case of any signer other than the local soft-signer the actual backend may just have a problem that causes it to be respond very slowly or be stuck completely.

@ximon18 ximon18 added the hsm Relates to adding HSM support to Krill label Aug 25, 2021
@ximon18 ximon18 linked a pull request Oct 6, 2021 that will close this issue
@ximon18
Copy link
Member Author

ximon18 commented Oct 6, 2021

For the HSM walking skeleton PR #679 timeouts and retries are used for connecting to the KMIP server and for reading and writing from the connection.

@ximon18
Copy link
Member Author

ximon18 commented Sep 6, 2022

Timing out of KMIP operations was delivered with the Krill v0.10.0 release.

There is however still no support for timing out PKCS#11 operations at this time.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
hsm Relates to adding HSM support to Krill
Projects
Development

Successfully merging a pull request may close this issue.

1 participant