Doug Engert

If card has more than 1 pin OpenSC will assign a slot for each pin. Use pkcs11-tool to list slots.

One cert has expired and should not be used . This could be the old cert is is in your ~/.cache where the other was read from the card

Normal flow for smart card key and certificate creation: - Generate key pair on card. Card either returns the public key or the card makes the public key available. -...

https://www.agid.gov.it/sites/default/files/repository_files/filesystemcns_2024_01_29_v.11.pdf is from 2024 The other two are old. The OpenSC driver code https://github.com/OpenSC/OpenSC/blob/master/src/libopensc/card-itacns.c may not have full support for your card. OpenSC Developers: Anyone with with Italian ID card,...

> not sure about windows differences though. PKCS11 and pkcs15 access is the same on windows as on Linux. Access using Microsoft programs such as certutil.exe need registry entries with...

Google for "Quantum" "PKCS11" The Google AI points at articles from wolfssl and IBM. Also listed some work being done by others including osias-open.org that maintains the PKCS11 standards.

P.S. Libp11 is mainly used to with OpenSSL engine or provider so it cannot do much without OpenSSL support for any mechanisms not supported by OpenSSL. The OpenSC pkcs11-tool is...

> If you've found some software that's free to use and works well, feel free to update your replies with links to its homepage I will let @sandevins do the...

https://openssl-library.org/post/2025-04-08-openssl-35-final-release/ https://developer.ibm.com/tutorials/awb-quantum-safe-openssl/#step-4-install-open-quantum-safe-provider-for-openssl-35 (from February) Google: "PKCS11" module with "PQC" Shows even more info.

> Thank you for the links. How exactly are OpenSSL providers useful for testing CKK_VENDOR_DEFINED functionality of PKCS#11 modules? Probably, not usefully, unless some PKCS11 module is implementing one of...