Ryan Hurst

I'm not too fond of the idea of exposing ASN.1 encoding types in X509, I do not believe we do this elsewhere, and it looks like a footgun to do...

It sounds like the PKCS library is saying it doesn’t support rsa_pkcs. Have you tried enumerating supported mechanisms to see what it supports?

Start by looking at the SoftHSM implementation.

It is true it won't do windows builds, we may be able to do cross-compilation but even if we can't do MSCAPI here we can do the others. For MSCAPI...

Here is a webcrypto based implementation of a double ratchet protocol https://github.com/PeculiarVentures/2key-ratchet

Try https://github.com/PeculiarVentures/pvpkcs11

Elvis, If I understand correctly you are able to see the certificates in the Firefox certificate management user experience but the certificates are not being displayed in the certificate picker...

@egustin no it is not possible to bypass the server provide certificate filter in any of the major browsers. Did you try looking at what was being sent by the...

Can you give us the ATR and the fully qualified path to the PKCS11 library?

As we don’t have the token, and don’t have a native speaker to read through the documents at the provided link I’m not sure when we will find the time...