Skip to main content

REST interface

The REST interface is used by the respective client or the cash register to perform the signature of the receipt on the HSM.

The REST interface is available over HTTPS (TLS secured connection) and access is limited via username and password. Furthermore, it is recommended that selfsigned certificates are pinned on the client 1.

Configuration for Internet and untrusted networks​

To change the REST interface the following steps need to be carried out.

Logon to the Linux server​

The administrator must log in with the user root and supply the password delivered by A-Trust.

Create user and passwords for accessing REST interface​

The following command creates a new user. The [user] defines the username, the password is requested in the terminal.

htpasswd /etc/nginx/.htpasswdapi [user]

The following command deletes an existing user. The [user] defines the username.

htpasswd -D /etc/nginx/.htpasswdapi [user]

Footnotes​

  1. Canonical Ltd.: Netplan configuration example, 2022. https://netplan.io/examples#configuring-interface-bonding ↩