[openssl-users] [openssl-dev] Ubsec and Chil engines
rsalz at akamai.com
Mon Feb 22 14:46:28 UTC 2016
> If we integrate the support natively into OpenSSL, then PKCS#11 URIs (see
> RFC7512) can be first-class citizens throughout the crypto and SSL APIs. Any
> function which takes a filename for a cert or key should also accept¹ a
> PKCS#11 URI.
It'd be great to see a crypto/pkcs11 directory with full native support (as much as possible).
But really doubtful to happen in 1.1 as the API freeze is in a month.
More information about the openssl-users