File:  [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan / conf / plugins / pkcs11.conf
Revision 1.1.1.1 (vendor branch): download - view: text, annotated - select for diffs - revision graph
Wed Jun 3 09:46:43 2020 UTC (5 years, 6 months ago) by misho
Branches: strongswan, MAIN
CVS tags: v5_9_2p0, v5_8_4p7, HEAD
Strongswan

    1: pkcs11 {
    2: 
    3:     # Whether to load the plugin. Can also be an integer to increase the
    4:     # priority of this plugin.
    5:     load = yes
    6: 
    7:     # Reload certificates from all tokens if charon receives a SIGHUP.
    8:     # reload_certs = no
    9: 
   10:     # Whether the PKCS#11 modules should be used for DH and ECDH (see use_ecc
   11:     # option).
   12:     # use_dh = no
   13: 
   14:     # Whether the PKCS#11 modules should be used for ECDH and ECDSA public key
   15:     # operations. ECDSA private keys can be used regardless of this option.
   16:     # use_ecc = no
   17: 
   18:     # Whether the PKCS#11 modules should be used to hash data.
   19:     # use_hasher = no
   20: 
   21:     # Whether the PKCS#11 modules should be used for public key operations, even
   22:     # for keys not stored on tokens.
   23:     # use_pubkey = no
   24: 
   25:     # Whether the PKCS#11 modules should be used as RNG.
   26:     # use_rng = no
   27: 
   28:     # List of available PKCS#11 modules.
   29:     modules {
   30: 
   31:         <name> {
   32: 
   33:             # Whether to automatically load certificates from tokens.
   34:             # load_certs = yes
   35: 
   36:             # Whether OS locking should be enabled for this module.
   37:             # os_locking = no
   38: 
   39:             # Full path to the shared object file of this PKCS#11 module.
   40:             # path =
   41: 
   42:         }
   43: 
   44:     }
   45: 
   46: }
   47: 

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>