ROOSTby Axowl

Docs

Quick start with the simulator

The simulator runs three voters and the quorum proxy on your computer. This loopback fixture exercises the voter protocol. A managed appliance also checks a caller proof; see managed signing.

1. Start three voters and the proxy

cd host
python -m pip install -r requirements.txt
python signer_sim.py --port 5101 --kind sim &
python signer_sim.py --port 5102 --kind sim &
python signer_sim.py --port 5103 --kind sim &
python proxy_quorum.py --signers tcp:127.0.0.1:5101,tcp:127.0.0.1:5102,tcp:127.0.0.1:5103 --quorum 2 --auto-enroll --demo-unauthenticated

2. Sign

curl -s -X POST localhost:8080/v1/sign -H 'content-type: application/json' \
  -d '{"hash":"'$(printf 'hello' | sha256sum | cut -c1-64)'","keyId":"demo"}'

The answer carries an IRON3: receipt signed by at least two voters. Stop one voter and sign again: the other two still make the quorum. Stop two and the proxy answers 503 QUORUM_NOT_MET.

3. Verify

Send the original digest and the receipt to POST /v1/verify. See HTTPS gateway API.

On a real box, replace the TCP voters with the chips in the appliance. The gateway address and the API stay the same.