Op 09-07-13 16:49, Klaus Darilion schreef:> > > btw: I just found pkcs11-proxy and some basic testing works fine. Does > anybody have practical experience with pkcs11-proxy?
I once tried to built a network-HSM by combining softhsm, pkcs11-proxy and stunnel. It worked rather well but was not very stable. As it turned out this was not a bug in pkcs11-proxy but a shortcomming in pkcs11 itself. I was to do it again I would take a look at p11-kit. There was talk of p11-kit working around the problem. http://lists.nominet.org.uk/pipermail/opendnssec-user/2011-April/001162.html -- Casper Gielen <cgie...@uvt.nl> | LIS UNIX PGP fingerprint = 16BD 2C9F 8156 C242 F981 63B8 2214 083C F80E 4AF7 Universiteit van Tilburg | Postbus 90153, 5000 LE Warandelaan 2 | Telefoon 013 466 4100 | G 236 | http://www.uvt.nl _______________________________________________ Opendnssec-user mailing list Opendnssec-user@lists.opendnssec.org https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
