On 09.07.2013 17:27, Casper Gielen wrote:
Op 09-07-13 16:49, Klaus Darilion schreef:>
btw: I just found pkcs11-proxy and some basic testing works fine. Does
anybody have practical experience with pkcs11-proxy?
I once tried to built a network-HSM by combining softhsm, pkcs11-proxy
and stunnel. It worked rather well but was not very stable. As it turned
out this was not a bug in pkcs11-proxy but a shortcomming in pkcs11 itself.
I was to do it again I would take a look at p11-kit. There was talk of
p11-kit working around the problem.
http://lists.nominet.org.uk/pipermail/opendnssec-user/2011-April/001162.html
Hi Casper!
Thanks for the reference. I looked at the p11-kit, but this is rather
undocumented. I failed using it.
Anybody had success in using p11-kit to proxy the HSM?
Thanks
Klaus
_______________________________________________
Opendnssec-user mailing list
Opendnssec-user@lists.opendnssec.org
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user
