pkcs#11 - OpenSSL interface with a specific PKCS11 engine binary -
i have pkcs11 library hsm , utilize openssl interface pkcs11 library generate keys , certificates.
how do without needing install external 3rd party software other hsm, pkcs11 binary provided hsm , openssl.
depending on library includes, how it's compiled, , how compliant openssl, believe need utilize openssl engine
command, although i've never used before add together engine.
this seems pretty source of information. talks third-party software, think that's testing/troubleshooting (unless consider evp, openssl api, third-party software). starting on page 26, seems have comprehensive documentation on how add together pkcs11 engine openssl.
http://www.dnssec.cz/files/nic/doc/hsm.pdf
openssl pkcs#11 hsm
No comments:
Post a Comment