Function bootstrap_keys

kms/src/onboard_service.rs:363–372

(cfg: &KmsConfig)

}

pub(crate) async fn bootstrap_keys(cfg: &KmsConfig) -> Result<()> {
    ensure_self_kms_allowed(cfg)
        .await
        .context("KMS is not allowed to auto-bootstrap")?;
    let keys = Keys::generate(&cfg.onboard.auto_bootstrap_domain)
        .await
        .context("Failed to generate keys")?;
    keys.store(cfg)?;
    Ok(())
}

async fn attest_keys(p256_pubkey: &[u8], k256_pubkey: &[u8]) -> Result<Vec<u8>> {
    let p256_hex = hex::encode(p256_pubkey);