libnetconf2 icon indicating copy to clipboard operation
libnetconf2 copied to clipboard
verified publisher icon CESNET

client and server tls UPDATE add pkcs11 engine support

Open vkarpenk opened this issue 1 year ago • 1 comments

This PR is adding pkcs#11 support for TLS private key storage. This was tested using Intel 'Key Management Reference Application (KMRA)' project, which uses SGX enclave to store manage keys, but could be used with other pkcs#11 targets. Moves private keys from local file to remote key management storage.

vkarpenk avatar Jan 19 '24 12:01 vkarpenk

Since ENGINE is deprecated with OpenSSL 3, please, switch to the PROVIDER API.

vjardin avatar Jan 19 '24 12:01 vjardin