Modules
Licences for on-premises Elixir apps.
The app's calls to the licensing server, under /api/v1, JSON both ways.
Whether this install may run. The gate checks the stored licence at boot
and every hour, holds :licensed or {:locked, reason} where every
reader finds it without a call, and renews the licence in its term's
last week.
The keypair that ties a licence to one install. The licensing server stores its public half and names it in the signed licence; the app proves it holds the private half by signing a fresh random value.
The install key as a PEM file, install_key.pem, in the licence folder,
for a machine with no TPM chip.
The install key inside the machine's TPM 2.0 chip. The chip makes the P-256 keypair and never lets the private half out, so a copied disk cannot prove it is the licensed machine.
Signs a licence file from an activation request. A licensing server
calls it, and mix aker.sign calls it on a developer's machine.
Reads a signed licence file and checks every signature and field in it.
The host's identity a licence names: the SHA-256 of its machine id file, lowercase hex.
Ed25519 public keys as a host's config lists them: raw 32-byte keys,
base64. A host decodes its root key list through decode/1 at boot and
stops on an error, which names the entry's place in the list and never
its value.
The activation request an install sends the licensing server to get its licence.
A call to the licensing server signed by the install key, and the check a server runs on one.
A private Ed25519 key: a licence issuer's root key, or a working key
the root key certifies. Only a signing task reads one, from a file kept off the
repository and off every server. inspect/1 shows no key bytes, so a
crash or a log line that holds the key prints none.
Where a host keeps its licence. The gate reads and writes it only through this behaviour, so the library takes no database dependency.
What a verified licence says. Only Aker.LicenceFile builds one,
after every signature and field passed, so holding one means a trusted
root key's working key issued it for this install.
Mix Tasks
Sign a licence from an install's activation request, standing in for the licensing server on your own machine.