in proxy/cloudhsm/proxy/src/main/java/com/amazon/aws/pix/cloudhsm/proxy/PixCloudHSMProxyRouteBuilder.java [162:178]
private void loadCloudHsmKeyStore() throws IOException, CFM2Exception, KeyStoreException, CertificateException, NoSuchAlgorithmException {
SecretsManagerClient secretsManagerClient = SecretsManagerClient.builder()
.region(Region.of(awsDefaultRegion))
.httpClientBuilder(UrlConnectionHttpClient.builder())
.build();
GetSecretValueResponse secretValue = secretsManagerClient.getSecretValue(builder -> builder.secretId(Secret.CloudHSMSecret.getSecretId()));
JSONObject secret = new JSONObject(secretValue.secretString());
String hsmUser = secret.getString(Secret.CloudHSMSecret.user);
String hsmPassword = secret.getString(Secret.CloudHSMSecret.password);
Security.addProvider(new com.cavium.provider.CaviumProvider());
LoginManager.getInstance().login("PARTITION_1", hsmUser, hsmPassword);
cloudHsmKeyStore = KeyStore.getInstance("CloudHSM");
cloudHsmKeyStore.load(null, null);
}