> If we integrate the support natively into OpenSSL, then PKCS#11 URIs (see > RFC7512) can be first-class citizens throughout the crypto and SSL APIs. Any > function which takes a filename for a cert or key should also accept? a > PKCS#11 URI. It'd be great to see a crypto/pkcs11 directory with full native support (as much as possible). But really doubtful to happen in 1.1 as the API freeze is in a month.
