[xmlsec] xmlsec1 and pkcs11

[Miklos Vajna]

Hi Jaromir,

On Mon, Feb 08, 2021 at 10:33:41AM +0100, Jaromir Talir <jaromir.talir at nic.cz> wrote:
> is there anybody on the list who has successfully used xmlsec1
> commandline tool with pkcs11 token? If so can you please share how?
> 
> It is mentioned several times in the mailing list archive but the
> answers only say that "it should work". From this search I got to the
> conclusion that some magic must be done with openssl config to make it
> work but nobody revealed this magic. Or maybe it is proper way to use
> nss backend instead? Please, share your success stories.

I have a pkcs11 token with an ECDSA certificate. It's working for me
with NSS on Linux and MSCNG on Windows.

I haven't tried openssl.

Regards,

Miklos