nethsm: Update EJBCA documentation

Author: robin-nitrokey

source/components/nethsm/ejbca.rst

@@ -1,10 +1,8 @@
 EJBCA
 =====
 
-.. warning::
-   Because of some integration problems with the Sun PKCS11 provider, keys generated from EJBCA will have a random name instead of the name given in the interface.
-   Therefor this documentation is only a Proof-of-Concept. Support for EJBCA will be introduced by NetHSM software 3.0.
-
+.. note::
+   EJBCA requires at least NetHSM v3 and nethsm-pkcs11 v2.
 
 `EJBCA <https://www.ejbca.org/>`__ is a PKI Certificate Authority software available as open source.
 
@@ -16,34 +14,18 @@ Then configure EJBCA to use the NetHSM PKCS#11 module by adding an entry in the
 
    cryptotoken.p11.lib.418.name=NetHSM
    cryptotoken.p11.lib.418.file=/usr/lib/nitrokey/libnethsm_pkcs11.so
+   cryptotoken.p11.lib.418.canGenerateKey=true
 
 
 .. note::
    The ``418`` in the name is an index that must be unique for each PKCS#11 module in the configuration file.
 
-To be able to generate keys from the interface you need to set the ``enable_set_attribute_value`` option to true in the ``p11nethsm.conf`` file.
-
 After restarting EJBCA you can add a new Crypto Token in the EJBCA Admin GUI ``https://mycahostname/ejbca/adminweb/cryptotoken/cryptotokens.xhtml``.
 The Crypto Token type is ``PKCS#11 Crypto Token`` and the Crypto Token name is ``NetHSM``.
 
 
-Executing The Example
----------------------
-
-If you want to experiment with the given example you can use git to clone the `nethsm-pkcs11 repository <https://github.com/Nitrokey/nethsm-pkcs11>`__ and run the following commands:
-
-1. Configure a NetHSM, either a real one or a container. Refer to chapter `Getting Started <getting-started.html>`__ to learn more.
-2. Change the libnethsm_pkcs11 configuration to match your NetHSM in ``container/ejbca/p11nethsm.conf``.
-3. Build the container.
-
-   .. code-block:: shell-session
-      
-      docker build -f container/ejbca/Dockerfile . -t pkcs-ejbca
+Docker Example
+---------------
 
-4. Run the container.
-  
-   .. code-block:: shell-session 
-      
-      docker run --rm -it -p 9443:8443 -p 9080:8080 -h mycahostname -e TLS_SETUP_ENABLED="simple" pkcs-ejbca
-  
-The container will be available at `https://localhost:9443/ <https://localhost:9443/>`__.
+We provide an example setup using docker for testing.
+If you want to experiment with it you can use git to clone the `nethsm-pkcs11 repository <https://github.com/Nitrokey/nethsm-pkcs11>`__ and then follow the steps described in the `container/ejbca/README.md <https://github.com/Nitrokey/nethsm-pkcs11/blob/main/container/ejbca/README.md>`__ file.