Return to pkcs11.conf CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan / conf / plugins

Annotation of embedaddon/strongswan/conf/plugins/pkcs11.conf, revision 1.1.1.1

1.1       misho       1: pkcs11 {
                      2: 
                      3:     # Whether to load the plugin. Can also be an integer to increase the
                      4:     # priority of this plugin.
                      5:     load = yes
                      6: 
                      7:     # Reload certificates from all tokens if charon receives a SIGHUP.
                      8:     # reload_certs = no
                      9: 
                     10:     # Whether the PKCS#11 modules should be used for DH and ECDH (see use_ecc
                     11:     # option).
                     12:     # use_dh = no
                     13: 
                     14:     # Whether the PKCS#11 modules should be used for ECDH and ECDSA public key
                     15:     # operations. ECDSA private keys can be used regardless of this option.
                     16:     # use_ecc = no
                     17: 
                     18:     # Whether the PKCS#11 modules should be used to hash data.
                     19:     # use_hasher = no
                     20: 
                     21:     # Whether the PKCS#11 modules should be used for public key operations, even
                     22:     # for keys not stored on tokens.
                     23:     # use_pubkey = no
                     24: 
                     25:     # Whether the PKCS#11 modules should be used as RNG.
                     26:     # use_rng = no
                     27: 
                     28:     # List of available PKCS#11 modules.
                     29:     modules {
                     30: 
                     31:         <name> {
                     32: 
                     33:             # Whether to automatically load certificates from tokens.
                     34:             # load_certs = yes
                     35: 
                     36:             # Whether OS locking should be enabled for this module.
                     37:             # os_locking = no
                     38: 
                     39:             # Full path to the shared object file of this PKCS#11 module.
                     40:             # path =
                     41: 
                     42:         }
                     43: 
                     44:     }
                     45: 
                     46: }
                     47: