docs: installation

[naftis]

Initial installation documentation. I added it here for starters, we will probably move these to Gitbook.

[tahmidrahman-dsi]

Looks good. 👍🏼

[tahmidrahman-dsi]

Should we put id reader realated form configuration changes documented in this repo under /docs? @naftis

[naftis]

@tahmidrahman-dsi You can either directly add them to Gitbook, or amend this pull request under /docs. I think we will move these both to Gitbook when we are ready, then Euan can proof read and amend. So I just made this for our convenience :D

[naftis]

@tahmidrahman-dsi

Some non-obvious documentation things:

1. External validation workqueue needs to be enabled from country-config default settings
2. FAQ

• JWSSignatureVerificationFailed
• Invalid RSAES-OAEP padding

[tahmidrahman-dsi]

@tahmidrahman-dsi

Some non-obvious documentation things:

1. External validation workqueue needs to be enabled from country-config default settings

I'll continue amending if more comes into mind..

Please feel free to have a look @naftis https://app.gitbook.com/o/zub8C4BetmW3a9Bj4Cd4/s/esn2q91OsFQf7ZqR8thb/~/revisions/UpoFPVYrQo17nWTN7grd/setup/3.-installation/3.2-set-up-your-own-country-configuration/3.2.5-set-up-application-settings#id-1.-prepare-global-functional-settings
in the external validation workqueue section

The PR opencrvs/documentation#21
cc: @euanmillar

[naftis]

Certificates

keystore.p12

• What is it for?
• How can you generate it?

ida-partner.crt

• What is it for?
• How can you generate it?

esignet-jwk.txt

• What is it for?

Instructions for Linux / Mac / WSL

1. Install Python library jwcrypto

pip install jwcrypto 

2. Generate a private key PEM

openssl genpkey -algorithm RSA -pkeyopt rsa_keygen_bits:2048 -out private_key.pem

You might want to save this to a secure trusted place

For OpenCRVS

3. Generate a Base64 private JWK from the PEM. This always produces the same result from the same private key, no need to save this.

python3 -c "from jwcrypto import jwk; k = jwk.JWK.from_pem(open('private_key.pem','rb').read()); k.use = 'sig'; k.alg = 'RS256'; print(k.export(private_key=True))" | base64

For MOSIP

4. Generate a public JWK from the PEM. Also always produces same result.

python3 -c "from jwcrypto import jwk; k = jwk.JWK.from_pem(open('private_key.pem','rb').read()); k.use = 'sig'; k.alg = 'RS256'; print(k.export(private_key=False))"