tree 6e290505fc336f0fc344d5799ebb322142c26e50
parent b2013baa9b179b7882256dad6beab7d6da9b056b
author Robin van der Gracht <robin@protonic.nl> 1694510183 +0200
committer Robin van der Gracht <robin@protonic.nl> 1695295645 +0200

feat(cert-create): add pkcs11 engine support

Add pkcs11 engine support which allows using keys that are securely
stored on a HSM or TPM. To use this feature the user has to supply
an RFC 7512 compliant PKCS11 URI to a key instead of a file as an
argument to one of the key options. This change is fully backwards
compatible.

This change makes use of the openssl engine API which is deprecated
since openssl 3.0 and will most likely be removed in version 4. So
pkcs11 support will have to be updated to the openssl provider API
in the near future.

Signed-off-by: Robin van der Gracht <robin@protonic.nl>
Change-Id: If96725988ca62c5613ec59123943bf15922f5d1f