Todd Short

> So long as this simpler solution can work with the server using our existing callback options to select a certificate dynamically, with the server not necessarily knowing the set...

> Looks like a rebase is required. (Un)fortunately, I've become a rebase master...

@mattcaswell this should have all updates now for the "simplified" API.

Regarding [crypto/objects/objects.pl](https://github.com/openssl/openssl/pull/18186/files#diff-9500e40b911f67a73336f30d70d8e5a75df712d8ad1c2fe7b2a89a246d84c674) which gitbub won't let me comment on directly. >Not sure if this is really necessary. One of the problems with the FIPS module is that it includes many...

All comments should be addressed, now

Something like https://github.com/OpenSC/OpenSC/wiki and PCKS#11?

Noting that the `SSL_SESSION` timeout code (which adds `timeout` to `time`) probably ought to be updated to use `OSSL_TIME`; however, there seems to be no API to convert `time_t` or...

FYI, @DDvO, I can write to the Akamai repo...

Based on the number of build failures, it would seem these conversions are necessary.

Alternative proposal: #17786 (it's a WIP, and could subsume this work).