[xmlsec] xmlsec1 and pkcs11
vmiklos at vmiklos.hu
Mon Feb 8 02:13:46 PST 2021
On Mon, Feb 08, 2021 at 10:33:41AM +0100, Jaromir Talir <jaromir.talir at nic.cz> wrote:
> is there anybody on the list who has successfully used xmlsec1
> commandline tool with pkcs11 token? If so can you please share how?
> It is mentioned several times in the mailing list archive but the
> answers only say that "it should work". From this search I got to the
> conclusion that some magic must be done with openssl config to make it
> work but nobody revealed this magic. Or maybe it is proper way to use
> nss backend instead? Please, share your success stories.
I have a pkcs11 token with an ECDSA certificate. It's working for me
with NSS on Linux and MSCNG on Windows.
I haven't tried openssl.
More information about the xmlsec