Merge branch 'infohub-export-cfg-changes' into 'main'

Update infohub configuration to use specific signing key and issuer DID

See merge request gaia-x/data-infrastructure-federation-services/tsa/workspace!5

docker-compose.yml

@@ -173,7 +173,7 @@ services:
   vault:
     hostname: vault
     container_name: vault
-    image: vault:1.10.3
+    image: vault:1.12.0
     environment:
       VAULT_ADDR: "http://0.0.0.0:8200"
       VAULT_API_ADDR: "http://0.0.0.0:8200"
@@ -188,7 +188,7 @@ services:
 
   vault-init:
     container_name: vault-init
-    image: vault:1.10.3
+    image: vault:1.12.0
     volumes:
       - ./vault/vault-init.sh:/vault-init.sh
     depends_on:

mongo/docker-entrypoint-initdb.d/mongo-init.js

@@ -135,12 +135,15 @@ db.exports.insertMany(
     [
         {
             "exportName":"testexport",
-            "contexts":["https://www.w3.org/2018/credentials/examples/v1"],
+            "contexts":["https://w3id.org/security/suites/jws-2020/v1"],
             "policies":{
                 "example/example/1.0":{},
                 "example/example/2.0":{"hello":"world"}
             },
-            "cacheTTL": 300
+            "cacheTTL": 300,
+            "key": "key1",
+            "keyNamespace": "transit",
+            "issuer": "did:web:example.com"
         }
     ]
 );

nginx/nginx.conf

@@ -15,6 +15,7 @@ http {
         }
 
         location /policy/ {
+            proxy_pass_request_headers on;
             proxy_pass http://policy:8080/;
         }
 

vault/vault-init.sh

@@ -12,8 +12,11 @@ vault login root
 # enable vault transit engine
 vault secrets enable transit
 
-# create key1 with type ed25519
-vault write -f transit/keys/key1 type=ed25519
+# create key1 with type ecdsa-p256
+vault write -f transit/keys/key1 type=ecdsa-p256
 
-# create key2 with type ecdsa-p256
-vault write -f transit/keys/key2 type=ecdsa-p256
+# create key2 with type ed25519
+vault write -f transit/keys/key2 type=ed25519
+
+# create key3 with type rsa4096
+vault write -f transit/keys/key3 type=rsa4096