pkcs#11 - OpenSSL interface with a specific PKCS11 engine binary -

pkcs#11 - OpenSSL interface with a specific PKCS11 engine binary -

i have pkcs11 library hsm , utilize openssl interface pkcs11 library generate keys , certificates.

how do without needing install external 3rd party software other hsm, pkcs11 binary provided hsm , openssl.

depending on library includes, how it's compiled, , how compliant openssl, believe need utilize openssl engine command, although i've never used before add together engine.

this seems pretty source of information. talks third-party software, think that's testing/troubleshooting (unless consider evp, openssl api, third-party software). starting on page 26, seems have comprehensive documentation on how add together pkcs11 engine openssl.

http://www.dnssec.cz/files/nic/doc/hsm.pdf

openssl pkcs#11 hsm