pkcs11.conf 1.2 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647
  1. pkcs11 {
  2. # Whether to load the plugin. Can also be an integer to increase the
  3. # priority of this plugin.
  4. load = yes
  5. # Reload certificates from all tokens if charon receives a SIGHUP.
  6. # reload_certs = no
  7. # Whether the PKCS#11 modules should be used for DH and ECDH (see use_ecc
  8. # option).
  9. # use_dh = no
  10. # Whether the PKCS#11 modules should be used for ECDH and ECDSA public key
  11. # operations. ECDSA private keys can be used regardless of this option.
  12. # use_ecc = no
  13. # Whether the PKCS#11 modules should be used to hash data.
  14. # use_hasher = no
  15. # Whether the PKCS#11 modules should be used for public key operations, even
  16. # for keys not stored on tokens.
  17. # use_pubkey = no
  18. # Whether the PKCS#11 modules should be used as RNG.
  19. # use_rng = no
  20. # List of available PKCS#11 modules.
  21. modules {
  22. <name> {
  23. # Whether to automatically load certificates from tokens.
  24. # load_certs = yes
  25. # Whether OS locking should be enabled for this module.
  26. # os_locking = no
  27. # Full path to the shared object file of this PKCS#11 module.
  28. # path =
  29. }
  30. }
  31. }