secubox-openwrt/luci-app-ksm-manager/root/usr/share/rpcd/acl.d/luci-app-ksm-manager.json
CyberMind-FR bfb9f91798 feat: add Key Storage Manager (KSM) module with HSM support
Add luci-app-ksm-manager - comprehensive cryptographic key management
module with hardware security module support for Nitrokey and YubiKey.

Features:
- Cryptographic key management (RSA, ECDSA, Ed25519)
- Hardware Security Module support (Nitrokey, YubiKey)
- Certificate management with CSR generation
- Encrypted secrets storage (AES-256-GCM)
- SSH key management and deployment
- Comprehensive audit logging
- Backup and restore functionality

Implementation:
- 22 RPCD methods for complete key lifecycle management
- 8 LuCI views (overview, keys, HSM, certificates, secrets, SSH, audit, settings)
- Full API client with utility functions
- Comprehensive README with setup and usage guides

Validation:
- All naming conventions verified
- Menu paths match view files
- JSON syntax validated
- JavaScript syntax checked
- RPCD script executable and properly named

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2025-12-25 09:18:14 +01:00

51 lines
933 B
JSON

{
"luci-app-ksm-manager": {
"description": "Grant access to Key Storage Manager",
"read": {
"ubus": {
"luci.ksm-manager": [
"status",
"get_info",
"list_hsm_devices",
"get_hsm_status",
"list_keys",
"list_certificates",
"verify_certificate",
"list_secrets",
"get_audit_logs"
]
},
"uci": ["ksm"]
},
"write": {
"ubus": {
"luci.ksm-manager": [
"status",
"get_info",
"list_hsm_devices",
"get_hsm_status",
"init_hsm",
"generate_hsm_key",
"list_keys",
"generate_key",
"import_key",
"export_key",
"delete_key",
"generate_csr",
"import_certificate",
"list_certificates",
"verify_certificate",
"store_secret",
"retrieve_secret",
"list_secrets",
"rotate_secret",
"generate_ssh_key",
"deploy_ssh_key",
"get_audit_logs"
]
},
"uci": ["ksm"]
}
}
}