Hi, > Does anybody have split secrets working actually? Configuring shares always > gives incomplete results, no matter what is entered. When no shares are > configured everything works well and the key is loaded. > > On Thu, May 20, 2021 at 7:20 PM Kseniya Blashchuk <ksybl...@gmail.com> wrote: > Hello everyone! > I am new to openxpki, I am trying to enter a split password via web > interface, however it always shows me Incomplete (1/3), I have to enter 3 > shares. Split secret was created with clca tools. What am I doing wrong?
TL;DR: Secret sharing with software keys is only supported by the OpenXPKI Enterprise Edition, not by the Community Edition. Shamir's Secret Sharing for software protected keys was removed from the OpenXPKI Community Edition some time ago. The version that was implemented in the CE required direct entry of the actual computed shares and thus was quite unwieldy. We reimplemented and improved the feature considerably for the Enterprise Edition, though. The configuration fragment you quote is also no longer contained in the upstream community configuration, so I guess you are using an older version of the sample configuration as your configuration base. Best regards, Martin _______________________________________________ OpenXPKI-users mailing list OpenXPKI-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openxpki-users
