[Openvpn-devel] PKCS#11 - a little bit of help?

[Emmanuel D. <lo...@fr...>]

Hello everybody,

I'm trying to get openvpn read my certificates from a TPM2 using a
specially crafted PKCS#11 provider (the existing tpm2-pk11 is quite limited
for now but I might be able to extend it).

However, the PKCS#11 API is not something I'm comfortable with, and I'd
like to know if there is some document (design or anything, really) that
could help me to understand what openvpn wants exactly in order for me to
provide the missing bits. I've read the documents at [1] but found nothing
here of interest (for me).

So, does someone have any pointer?

Best regards,

-- Emmanuel Deloget

[1] https://openvpn.net/index.php/open-source/documentation.html