Overview

See also:

• An introduction to the use of HSM

• PKCS #11 Cryptographic Token Interface Base Specification Version 2.40

Java

See also:

• Java PKCS11

• Tomcat SSL/TLS Configuration HOW-TO

Python

See also:

• Python PKCS#11 - High Level Wrapper API

• Writing User-Level Cryptographic Applications and Providers

C

See also:

• PKCS11 API

PKCS #11 Kit

To list trusts:

$ trust list

To add an anchor stored in a cert file:

$ trust anchor <cert file>

To remove an anchor stored in a cert file:

$ trust anchor --remove <cert file>

To remove an anchor by ID:

$ trust anchor --remove "pkcs11:id=<cert ID>;type=cert"

See also:

• p11-kit

• Using the Trust Policy Module with NSS

References

• OpenSSL

• Tomcat

• OpenSSL with YubiHSM 2 via engine_pkcs11 and yubihsm_pkcs11

• HSM

• SoftHSM

• OpenSC

• NSS PKCS #11 Module Specs

• pkcs11-logger