using pkcs11
Open
- Dominant language
- Go
- Stars
- 9.5k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
Understand that pkcs11 support got removed from cfssl. Recommended is to use letsencrypt/pkcs11key. However the only documentation states to import a module to the cfssl build (I think). As I am not a Go developer I have no place to start to work this out.
Can anyone provide a set of steps to add pkcs11 support to the cfssl build. By this I mean that the cfssl command will have the ability to use the pkcs11 standard for interaction with an HSM. That would include using it with the 'cfssl serve' command.
If that is not possible, is there any practical way to use HSMs with the cfssl command ? (such as is simple with openssl)
Thank you.
Contributor guide
Assessment
This issue has not been assessed yet.