Return to pkcs11.conf CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan / conf / plugins

Annotation of embedaddon/strongswan/conf/plugins/pkcs11.conf, revision 1.1

1.1     ! misho       1: pkcs11 {
        !             2: 
        !             3:     # Whether to load the plugin. Can also be an integer to increase the
        !             4:     # priority of this plugin.
        !             5:     load = yes
        !             6: 
        !             7:     # Reload certificates from all tokens if charon receives a SIGHUP.
        !             8:     # reload_certs = no
        !             9: 
        !            10:     # Whether the PKCS#11 modules should be used for DH and ECDH (see use_ecc
        !            11:     # option).
        !            12:     # use_dh = no
        !            13: 
        !            14:     # Whether the PKCS#11 modules should be used for ECDH and ECDSA public key
        !            15:     # operations. ECDSA private keys can be used regardless of this option.
        !            16:     # use_ecc = no
        !            17: 
        !            18:     # Whether the PKCS#11 modules should be used to hash data.
        !            19:     # use_hasher = no
        !            20: 
        !            21:     # Whether the PKCS#11 modules should be used for public key operations, even
        !            22:     # for keys not stored on tokens.
        !            23:     # use_pubkey = no
        !            24: 
        !            25:     # Whether the PKCS#11 modules should be used as RNG.
        !            26:     # use_rng = no
        !            27: 
        !            28:     # List of available PKCS#11 modules.
        !            29:     modules {
        !            30: 
        !            31:         <name> {
        !            32: 
        !            33:             # Whether to automatically load certificates from tokens.
        !            34:             # load_certs = yes
        !            35: 
        !            36:             # Whether OS locking should be enabled for this module.
        !            37:             # os_locking = no
        !            38: 
        !            39:             # Full path to the shared object file of this PKCS#11 module.
        !            40:             # path =
        !            41: 
        !            42:         }
        !            43: 
        !            44:     }
        !            45: 
        !            46: }
        !            47: