[src/lib] add support for ENGINE-backed keys

kakwa / uts-server

Micro RFC 3161 Time-Stamp server written in C.

http://uts-server.readthedocs.org/en/latest/

MIT License

75 stars 21 forks source link

[src/lib] add support for ENGINE-backed keys #15

Open bbbrumley opened 4 years ago

bbbrumley commented 4 years ago

The use case is any ENGINE that stores keys internally, such as PKCS11, HSMs, TPMs, etc.

You can see OpenSSL CLI apps handling keys similarly:

https://github.com/openssl/openssl/blob/4b1fe471ac99b9f8692be85dcbcbf6977eb35c78/apps/lib/apps.c#L534-L549

bbbrumley commented 4 years ago

Related to #10 it seems.

bbbrumley commented 4 years ago

@kakwa Gentle ping :) Any thoughts on this PR? I've tested it with e_nss which will give a PKCS11 soft-token view and can provide instructions for that if you're interested.