# $Id: qs_renewalworker_configuration.properties 2502 2012-08-22 11:22:13Z netmackan $
#
# Example SignServer configuration property file
#
# Used to quick install a RenewalWorker.
# This configuration must be updated with correct paths to the PKCS#12 keystores 
# or changed to use PKCS#11.
# A truststore containing the issuer of the CA server TLS certificate.
# The address of the EJBCA server must be specified.
# An end entity in EJBCA must be configured with the name "samplerenewee".
#
# Install with the command:
#   bin/signserver.sh setproperties doc/sample-configs/qs_renewalworker_configuration.properties
#   bin/signserver.sh reload 309
#   bin/signserver.sh reload 301
#

## Global properties

GLOB.WORKER309.CLASSPATH = org.signserver.module.renewal.worker.RenewalWorker
GLOB.WORKER309.SIGNERTOKEN.CLASSPATH = org.signserver.server.cryptotokens.P12CryptoToken


## General properties

WORKER309.NAME=RenewalWorker
WORKER309.AUTHTYPE=NOAUTH

## P12CryptoToken properties

WORKER309.KEYSTOREPATH=PATH-TO-RENEWAL-WORKER-KEYSTORE
WORKER309.KEYSTOREPASSWORD=RENEWAL-WORKER-KEYSTORE-PASSWORD
WORKER309.DEFAULTKEY=KEY-ALIAS-IN-KEYSTORE-TO-USE


## RenewalWorker properties
WORKER309.EJBCAWSURL=https://CA-SERVER:8443/ejbca
WORKER309.TRUSTSTOREPATH=PATH-TO-CA-CERTIFICATE-IN-PEM
WORKER309.TRUSTSTORETYPE=PEM
WORKER309.TRUSTSTOREPASSWORD=unused-but-must-be-specified



## Sample Renewee
GLOB.WORKER301.CLASSPATH = org.signserver.module.xmlsigner.XMLSigner
GLOB.WORKER301.SIGNERTOKEN.CLASSPATH = org.signserver.server.cryptotokens.P12CryptoToken
WORKER301.NAME=SampleRenewee
WORKER301.AUTHTYPE=NOAUTH
WORKER301.KEYSTOREPATH=PATH-TO-THE-SIGNERS-KEYSTORE
WORKER301.KEYSTOREPASSWORD=KEYSTORE-PASSWORD


# Renewee properties
WORKER301.DEFAULTKEY=Signer 2
WORKER301.RENEWENDENTITY=samplerenewee
WORKER301.REQUESTDN=CN=Sample Renewee 1,O=SignServer Testing,C=SE
WORKER301.SIGNATUREALGORITHM=SHA1WithRSA
WORKER301.KEYALG=RSA
WORKER301.KEYSPEC=2048
WORKER301.RENEWWORKER=RenewalWorker

