1313
1414This code repository provides three libraries:
1515* libp11 – Provides a higher-level interface (compared to the PKCS #11 library)
16- for accessing PKCS #11 objects. It is designed to integrate with applications
17- that use OpenSSL.
16+ for accessing PKCS #11 objects. It is designed to integrate with applications
17+ that use OpenSSL.
1818* pkcs11prov – An OpenSSL 3.x provider plugin that allows transparent access to
19- PKCS #11 modules.
20- * pkcs11 – A plugin for legacy versions of the OpenSSL library that allows
21- semi-transparent access to PKCS #11 modules.
19+ PKCS #11 modules.
20+ * pkcs11 – A legacy OpenSSL engine plugin that allows semi-transparent access
21+ to PKCS #11 modules.
2222
2323The wiki page for this project is available at
24- https://github.com/OpenSC/libp11/wiki . It includes a bug tracker and source
24+ https://github.com/OpenSC/libp11/wiki . It includes a bug tracker and source
2525browser.
2626
2727## PKCS #11
@@ -276,7 +276,7 @@ configuration explicitly. The following line loads the pkcs11 engine with the
276276PKCS #11 module opensc-pkcs11.so:
277277
278278```
279- OpenSSL> engine -t dynamic
279+ OpenSSL> engine -t dynamic
280280 -pre SO_PATH:/usr/lib/x86_64-linux-gnu/engines-3/pkcs11.so
281281 -pre ID:pkcs11 -pre LIST_ADD:1 -pre LOAD
282282 -pre MODULE_PATH:opensc-pkcs11.so
@@ -332,13 +332,15 @@ The following engine controls are supported:
332332* ** SO_PATH** : Specifies the path to the 'pkcs11-engine' shared library
333333* ** MODULE_PATH** : Specifies the path to the pkcs11 module shared library
334334* ** PIN** : Specifies the PIN
335- * ** DEBUG_LEVEL** : Set the debug level: 0=emerg, 1=alert, 2=crit, 3=err, 4=warning, 5=notice (default), 6=info, 7=debug
335+ * ** DEBUG_LEVEL** : Set the debug level: 0=emerg, 1=alert, 2=crit, 3=err,
336+ 4=warning, 5=notice (default), 6=info, 7=debug
336337* ** QUIET** : Do not print additional details
337338* ** LOAD_CERT_CTRL** : Load a certificate from token
338339* ** SET_USER_INTERFACE** : Set the global user interface
339340* ** SET_CALLBACK_DATA** : Set the global user interface extra data
340341* ** FORCE_LOGIN** : Force login to the PKCS #11 module
341- * ** RE_ENUMERATE** : re-enumerate the slots/tokens, required when adding/removing tokens/slots
342+ * ** RE_ENUMERATE** : re-enumerate the slots/tokens, required when
343+ adding/removing tokens/slots
342344* ** VLOG_A** : Set the logging callback
343345
344346The following example demonstrates how to set a specific module:
@@ -360,7 +362,7 @@ libp11 internally uses OS locking, and configures the PKCS#11 module to do
360362the same.
361363
362364Access to PKCS #11 tokens and objects is provided via a pool of PKCS #11
363- sessions. This allows concurrent usage of crypto operations in a thread-safe
365+ sessions. This allows concurrent usage of crypto operations in a thread-safe
364366manner.
365367
366368## Submitting pull requests
0 commit comments