HashiCorp Vault configuration settings
The TOML configuration file used to retrieve the encryption key from HashiCorp Vault and configure secure communication using TLS when configuring encrypted storage.
Configuration setting | Required/Optional | Description |
---|---|---|
hashicorp.serverHost |
Required | Host address of HashiCorp Vault. |
hashicorp.serverPort |
Required | Port number of HashiCorp Vault. |
hashicorp.token |
Required | Root token generated when starting HashiCorp Vault. |
hashicorp.keyPath |
Required | Path to the stored encryption key. |
hashicorp.keyName |
Optional | Name of the stored encryption key. The default is value . |
hashicorp.timeout |
Optional | Timeout in milliseconds. The default is 10000 (10 seconds). |
hashicorp.tlsEnable |
Optional | Enable a TLS connection between Hyperledger Besu and HashiCorp Vault server. The default is true . |
hashicorp.tlsVerifyHost |
Optional | Verify the host name on the certificate matches the server. If they do not match, the connection is denied. If TLS is enabled, the default is true . |
hashicorp.tlsTrustStoreType |
Optional | Type of trust store. Supported types include PEM, PKCS12, and JKS. |
hashicorp.tlsTrustStorePath |
Optional | Location of the trust store. |
hashicorp.tlsTrustStorePassword |
Optional | Trust store password. Required if the trust store type is JKS or PKCS12. |