Re: OpenSSL version 3.0.0-beta1 published

[Dr Paul Dale <pauli@xxxxxxxxxxx>]

> However, I was wondering if anyone has ported/refactored the pkcs11 
> engine stuff for OpenSSL 3.0 already?  is this on the TODO list for 
> the OpenSC/pkcs11 team?  If I wanted to try to refactor the 
> opensc-pkcs11 module, how would I start?

PKCS #11 support is one (of many) possible items that will be considered 
for future versions of OpenSSL.  The technical and management committees 
will be discussing which items are going to be worked on for the 
subsequent release in the not too distant future.

I'll also note that PKCS #11 considerations were prominent through the 
3.0 design process.  A PKCS #11 provider is expected to be possible with 
minimal (hopefully no) changes to the provider / libcrypto interface.


Pauli