Can osslsigncode work with pkcs11 on Yubikey HSM 2?

mtrojnar / osslsigncode

OpenSSL based Authenticode signing for PE/MSI/Java CAB files

Other

731 stars 124 forks source link

Closed axi92 closed 6 months ago

axi92 commented 6 months ago

Because of the 2023 changes in code signing where you have to store your cert we like to move to the Yubikey HSM 2 that supports pkcs11 also over network. https://developers.yubico.com/yubihsm-shell/yubihsm-pkcs11.html

Does osslsigncode support this? Any hints on how to use it in that setup?

mtrojnar commented 6 months ago

Yes, osslsigncode supports PKCS#11, and you can find hints for using a PKCS#11 module in https://github.com/mtrojnar/osslsigncode/blob/master/README.md