aws-samples / aws-samples/aws-cloudhsm-pkcs11-examples
Key URIs
Nobody has claimed this yet.
- Dominant language
- C
- Stars
- 63
- Forks
- 49
- Avg merge
- 1h 15m
- Merged PRs (30d)
- 2
Description
I’m not certain where to put this, but if you could help me I’d be grateful. How can I create a URI for a key to use in OpenSSL? I’d like to use openssl to work with keys in the signing module, but I cannot because I don’t know what to use for e.g. -key arguments. The one example I’ve found indicates that you use the handle, but there’s no way I’ve found to get the handle from the v5 SDK (where there’s no CMU/KMU).
Is it something like:
openssl req \
-engine cloudhsm \
-keyform engine \
-key "pkcs11:object=my-key-label-private;type=private" \
-new -x509 -days 365 \
-subj "/CN=example.com" \
-out cert.pem
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The issue names the OpenSSL signing-module command, the v5 SDK, and a PKCS#11 URI, but no repository file or test. First verify whether v5 exposes a supported key URI or handle path, then document the correct -key argument and a working command, or state the limitation clearly.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws
- Domain
- cloud, cryptography, security
- Issue type
- Documentation
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100