These sample applications demonstrate how to use the JCE with CloudHSM. They show basic functionality, as well as best practices regarding performance.
This sample code is made available under a modified MIT license. See the LICENSE file.
The latest SDK5 version of CloudHSM JCE is required. They should be installed using the official procedures documented here:
The examples are tested on a fresh Amazon Linux 2 AMI. You will need to have the following packages installed:
- OpenJDK 8
- Apache Maven 3.0.5
You can install these packages on Amazon Linux 2 by running
sudo yum install -y java-1.8.0-amazon-corretto-devel maven
If you are running on Amazon Linux 1, you will need to install extra packages to get Maven. You can follow these instructions to build the samples on Amazon Linux 1:
# Maven is only available through extra packages
sudo wget http://repos.fedorapeople.org/repos/dchen/apache-maven/epel-apache-maven.repo -O /etc/yum.repos.d/epel-apache-maven.repo
sudo sed -i s/\$releasever/6/g /etc/yum.repos.d/epel-apache-maven.repo
# You will need Java 1.8 to build the samples
sudo yum install -y java-1.8.0-openjdk-devel
sudo yum install -y apache-maven
# When updating alternatives, choose the 1.8 path: /usr/lib/jvm/jre-1.8.0-openjdk.x86_64/bin/java
sudo update-alternatives --config java
You can build the project using Maven. Maven will copy the required CloudHSM jars into a local repository
and build fat jars which can be executed from the command line. These fat jars will be placed in the
target/assembly/
directory.
Before you build your project, be sure to enter the correct CloudHSM version number based on which CloudHSM JCE Provider
you have installed on your system. By default, this project is set to use the latest available CloudHSM version, and
you may need to make modifications if you are running an older version (note that not all tests are guaranteed to work
with older versions of the client). To do this, modify the following line in the pom.xml
to match your version:
<cloudhsmVersion>5.5.0</cloudhsmVersion>
To build the project, use the following command:
mvn validate
mvn clean package
You will need to have a CloudHSM Client connected to an ACTIVE cluster. For more details, please follow the official instructions here:
You will need to provide credentials to the JCE provider in order to run the samples. Please read about JCE provider credentials here:
All Java dependencies should be bundled in the fat jars. Jars can be run using the following command line (as an example):
java -ea -jar target/assembly/login-runner.jar --help
To run and verify all the samples together, run the command mvn verify