in proxy/kms/src/main/java/com/amazon/aws/pix/kms/proxy/service/Signer.java [30:44]
public Signer(Config config) {
KmsClient kmsClient = KmsClient.builder()
.region(config.getRegion())
.credentialsProvider(EnvironmentVariableCredentialsProvider.create())
.httpClientBuilder(UrlConnectionHttpClient.builder())
.build();
Security.addProvider(new KmsProvider(kmsClient));
PrivateKey privateKey = KmsRSAKeyFactory.getPrivateKey(config.getSignatureKeyId());
X509Certificate certificate = KeyStoreUtil.getCertificate(config.getSignatureCertificate());
KeyStore trustStore = KeyStoreUtil.generateTrustStore("bcb", config.getBcbSignatureCertificate());
xmlSigner = config.isIso20022() ? new Iso20022XmlSigner(privateKey, certificate, trustStore) : new XmlSigner(privateKey, certificate, trustStore);
}