[openssl-users] [openssl-dev] Ubsec and Chil engines

[Salz, Rich]

> If we integrate the support natively into OpenSSL, then PKCS#11 URIs (see
> RFC7512) can be first-class citizens throughout the crypto and SSL APIs. Any
> function which takes a filename for a cert or key should also accept¹ a
> PKCS#11 URI.

It'd be great to see a crypto/pkcs11 directory with full native support (as much as possible).

But really doubtful to happen in 1.1 as the API freeze is in a month.