pkcs11.opt 1.1 KB

1234567891011121314151617181920212223242526272829303132
  1. charon.plugins.pkcs11.modules {}
  2. List of available PKCS#11 modules.
  3. charon.plugins.pkcs11.modules.<name>.path =
  4. Full path to the shared object file of this PKCS#11 module.
  5. charon.plugins.pkcs11.modules.<name>.os_locking = no
  6. Whether OS locking should be enabled for this module.
  7. charon.plugins.pkcs11.modules.<name>.load_certs = yes
  8. Whether to automatically load certificates from tokens.
  9. charon.plugins.pkcs11.reload_certs = no
  10. Reload certificates from all tokens if charon receives a SIGHUP.
  11. charon.plugins.pkcs11.use_dh = no
  12. Whether the PKCS#11 modules should be used for DH and ECDH (see _use_ecc_
  13. option).
  14. charon.plugins.pkcs11.use_ecc = no
  15. Whether the PKCS#11 modules should be used for ECDH and ECDSA public key
  16. operations. ECDSA private keys can be used regardless of this option.
  17. charon.plugins.pkcs11.use_hasher = no
  18. Whether the PKCS#11 modules should be used to hash data.
  19. charon.plugins.pkcs11.use_pubkey = no
  20. Whether the PKCS#11 modules should be used for public key operations, even
  21. for keys not stored on tokens.
  22. charon.plugins.pkcs11.use_rng = no
  23. Whether the PKCS#11 modules should be used as RNG.