Skip to content

Latest commit

 

History

History
52 lines (40 loc) · 956 Bytes

README.md

File metadata and controls

52 lines (40 loc) · 956 Bytes
Raw

pkcs11provider

work in progress

build

./bootstrap
./configure
make

test

make check

usage

Configuring the provider in the config file:

openssl_conf = openssl_init

[openssl_init]
providers = providers_sect

[providers_sect]
pkcs11 = pkcs11_sect

[pkcs11_sect]
module = pkcs11.so
pkcs11module = <mymodule.so>
pkcs11slotid = <myslotid>
pkcs11userpin = <myuserpin>

Querying the provider via the CLI:

openssl provider -vvv pkcs11

Loading the provider from the application:

OSSL_PROVIDER *prov = OSSL_PROVIDER_load(NULL, "pkcs11");
if (prov == NULL)
    /* handle error */;
/* [...] */
if (OSSL_PROVIDER_unload(prov) != 1)
    /* handle error */;

The pkcs11 module shared object, slot id resp. user pin can also be specified by setting the PKCS11MODULE, PKCS11SLOTID resp. PKCS11USERPIN environment variable. If the environment variable is set, it will take precedence over the config file setting.