PKCS#11 Signer for JWT-CPP

softhsm2-util --show-slots

softhsm2-util --init-token --free --label "token-label"

softhsm2-util --init-token --free --label "token-label" --so-pin 1234 --pin 1234

pkcs11-tool --list-objects --module /usr/lib/softhsm/libsofthsm2.so -l --token-label "token-label" --pin 1234

pkcs11-tool --module /usr/lib/softhsm/libsofthsm2.so -l --token-label "token-label" -k --key-type EC:prime256v1 --id 1001 --label "key-label"

pkcs11-tool --module /usr/lib/softhsm/libsofthsm2.so -l --token-label "token-label" -k --key-type rsa:2048 --id 1001 --label "key-label"

pkcs11-tool --module /usr/lib/softhsm/libsofthsm2.so -T -O -I


openssl req -x509 -days 365 -new -nodes -out cert.crt -engine  pkcs11 -keyform engine -key 1001

References

• Integrating SoftHSM with OpenSSL using Opensc PKCS11

• openssl/openssl#22508

• https://github.com/rauc/rauc/blob/master/src/signature.c