Configuring SROS Keyserver to Generate Encrypted Private Key
Even though there doesn't seem to be any interest in further developing SROS1, I am still exploring it as it is a very interesting implementation. I am trying to figure how to amend the keyserver configuration file, but the SROS tutorial page for this does not exist.
I would like to modify the keyserver configuration file such that the generated private keys are encrypted. I have made the following amendments to the default configuration file:
- Line 93 --> encryption_algorithm: BestAvailableEncryption
- Line 94, 111, 129, 144 --> password_env: left_blank as per default
When sroskeyserver is initialised, I am prompted to key in pass phrase for root, master and keyserver before the certs are generated. The pass phrases are the comments in Line 94, 111 and 144 of keyserver_config.yaml. But I encounter a problem when prompted to enter the PEM pass phrase. Going by logic, the pass phrase should be the comment in Line 129, i.e. SROS_NODE_PASSWORD. However, this does not work and will result in error as follows:
Starting an XML-RPC server to bootstrap SSL key distribution...
Enter pass phrase for root:
Verifying - Enter pass phrase for root:
Certificate generated: root
Enter pass phrase for master:
Verifying - Enter pass phrase for master:
Certificate generated: master
Enter pass phrase for keyserver:
Verifying - Enter pass phrase for keyserver:
Enter PEM pass phrase:
Traceback (most recent call last):
File "/home/sros/sros/install/bin/sroskeyserver", line 3, in <module>
sros.sroskeyserver_main()
File "/home/sros/sros/install/lib/python2.7/dist-packages/sros/__init__.py", line 179, in sroskeyserver_main
keyserver.start_keyserver(keyserver_config, keystore_path, keyserver_mode, port)
File "/home/sros/sros/install/lib/python2.7/dist-packages/rosgraph/keyserver.py", line 143, in start_keyserver
keyserver.stop()
UnboundLocalError: local variable 'keyserver' referenced before assignment
Is there a default password written into the SROS system files? Or where can the password be set? Has anyone succeeded in modifying SROS keyserver configuration?
Thanks.