yubihsm-shell icon indicating copy to clipboard operation
yubihsm-shell copied to clipboard

Add PKCS#11 + yubihsm-auth integration

Open myksyr-tdy opened this issue 10 months ago • 3 comments

Integrate PKCS#11 library with yubihsm-auth authentication. When prompted by PKCS#11 to enter PIN code you need to enter "#$label#$key_id$pin" where

  • $label is the credential label in yubihsm-auth
  • $key_id is the key ID in the YubiHSM, four hex digits
  • $pin is the credential password in yubihsm-auth

myksyr-tdy avatar Apr 08 '24 09:04 myksyr-tdy

Is build test failure caused by some pipeline issue (curl)?

Tests pass locally as reported by "make test": 100% tests passed, 0 tests failed out of 31

Total Test time (real) = 233.84 sec

The following tests did not run: 22 - encrypt_aes (Skipped) 25 - aes_encrypt_test (Skipped)

myksyr-tdy avatar Apr 08 '24 09:04 myksyr-tdy

AES tests are skipped if the yubihsm doesn't support it (based on the version number). Nice work with the PR, thanks !

qpernil avatar Apr 08 '24 09:04 qpernil

@qpernil , is there anything I can do to help integrate this PR?

myksyr-tdy avatar Jun 26 '24 11:06 myksyr-tdy