For further info, here is the key currently in the HSM as reported by pkcs11-tool:
$ pkcs11-tool --module /usr/lib/opencryptoki/libopencryptoki.so.0 --login --list-objects Please enter User PIN: Private Key Object; RSA label: KSK2011 Usage: decrypt, sign, unwrap Public Key Object; RSA 2048 bits label: KSK2011 Usage: encrypt, verify, wrap -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
