search

opendnssec / SoftHSMv2

SoftHSM version 2
http://www.softhsm.org/
Other
778 stars 342 forks source link

Remote access of softhsm #672

Open AkashMaharana opened 2 years ago

AkashMaharana commented 2 years ago

Hi Team

I am currently implementing a business use case with Softhsmv2. So in the first phase of development I was able to interact with the softhsm by using PKCS11 library in JAVA. But later I got the requirement like I need to host the softhsm in a different machine or VM and client application needs to interact remotely to get the certificates.

So in my initial search I got to know about pkcs11-proxy library. Then I followed few of the stackover flow hints and github channels. Those links are given below. https://stackoverflow.com/questions/56756141/expose-softhsm-library-to-the-code-running-in-host-machine https://github.com/rbroggi/softhsm-daemon

In the above examples both softshm and client application present in the same machine. Can you guys please let me know is there anyway to connect a remote softhsm using PKCS11 interface in JAVA where I can define the IP of the remote machine to which it should connect?

Thanks

Jakuje commented 2 years ago

I dont have experience with the pkcs11-proxy or softhsm-daemon, but this functionality is provided also by p11-kit, which has this use case quite nicely documented: https://p11-glue.github.io/p11-glue/p11-kit/manual/remoting.html