Questions tagged [softhsm]

SoftHSM is software that emulates a PKCS11 Hardware Security Module for development and testing.

An HSM or Hardware Security Module is a PKCS11 compliant and tamper-proof hardware component for the management and storage of cryptographic assets such as keys and certificates, and for offloading cryptographic operations.

SoftHSM is a software emulation of a PKCS11 compliant HSM for purposes of development, training and testing. This provides a cost-effective alternative to purchasing dedicated hardware components for non-Production use. It is being developed as a part of the OpenDNSSEC project.

68 questions
0
votes
1 answer

Fabric-CA with SoftHSM: Could not initialize BCCSP PKCS11: Invalid config. It must not be nil

I have followed softHSM2 repo to install and initialize the token but when I start the fabric-ca-server container with PKCS11 env variables I get Could not initialize BCCSP PKCS11: Invalid config. It must not be nil. according to fabric-ca docs just…
0
votes
1 answer

how to read softhsm keys

I am using softhsm2 to generate keys/tokens, and I don't know how I can read my keys value. I am using this command to get the hsm content but it doesn't give a lot of details : pkcs11-tool --module /usr/lib64/pkcs11/libsofthsm2.so -l -t is there…
zero
  • 43
  • 4
0
votes
1 answer

CKR_GENERAL_ERROR when configuring SunPKCS11 with softhsm

I'm getting CKR_GENERAL_ERROR when configuring SunPKCS11 with softhsm. Platform: Winodows 10 64bits OpenJDK 11.0.2 https://github.com/disig/SoftHSM2-for-Windows/releases/download/v2.5.0/SoftHSM2-2.5.0.msi Environment…
leaqui
  • 533
  • 6
  • 22
0
votes
1 answer

Can't refer to EVP_DigestSign and EVP_DigestVerify when make check OSSLEDDSATests of Softhsmv2

I'm trying to update my installation with openssl 1.1.1j and SoftHSMv2 v2.6.1, command "make" is passed, but "make check" is failed. can't refer to EVP_DigestSign and EVP_DigestVerify in OSSLEDDSA.cpp. the logs is : Making check in src make[1]:…
c20liu
  • 1
0
votes
0 answers

softhsm v2 vs. Utimaco simulator

I need to choose an HSM simulator to manage my keys. Could you please help me choose between softhsm v2 and Utimaco simulator? Ideal would be that the simulator is dockerized. I also would like to develop a Python library using PKCS#11 to manage…
rota90
  • 249
  • 1
  • 4
  • 17
0
votes
0 answers

Hyperledger Fabric with SoftHSM2

Hi I have been trying to get Hyperledger Fabric (v2.0.1) to connect to SoftHSM2 (v2.5.0), but haven't been successful at that. The main purpose is to create a secret key for symmetric encryption/decryption and securely store the key inside the…
0
votes
1 answer

What is cbc_param when we use pkcs11.C_EncryptInit

Moving from PTK to Luna and now in code, I need to pass cbc_param, before the inside object was the only mechanism. Can somebody explain what is this about? How PTK manage cbc_param? What is the difference with and without cbc_param? var cbc_param =…
user8269715
  • 1
  • 1
  • 4
0
votes
1 answer

PKCS11 - Generate key for SHA256_HMAC

I use Botan2 library to access SoftHSM2. I managed to generatesome AES/DES keys, yet I would like to generate a secret for SHA256 HMAC. My code (after creating session, logging in and detecting my token): namespace p11 =…
Ondřej Navrátil
  • 453
  • 1
  • 4
  • 11
0
votes
0 answers

PKCS #11 unresolved external symbol

Trying to write a simple program to try out PKCS #11 with a software based HSM. Using Windows 10, Visual Studio, and C++. I downloaded the pkcs header files and have #include "pkcs11.h" at the top of my code. I have also copied the "softhsm2.dll"…
Nick
  • 1
  • 1
0
votes
0 answers

SoftHSM V2 lib file?

Using SoftHSM V2 for Windows which can be found at https://github.com/disig/SoftHSM2-for-Windows on Windows 10 for use with PKCS #11. Installed and can run the softhsm2-util successfully, but I cannot find a .lib file. I can only find a DLL, no .lib…
Nick
  • 1
  • 1
0
votes
0 answers

Hyperledger Fabric with SOFTHSM

Hello im trying to use softhsm with fabric with the help of https://hyperledger-fabric-ca.readthedocs.io/en/release-1.4/users-guide.html#configuring-an-hsm I have downloaded the image and made the binaries with GO_TAGS=pkcs11 make docker and the…
0
votes
2 answers

Running Fabric CA natively - Could not find default `PKCS11` BCCSP

Attempting to configure HSM according to: https://hyperledger-fabric-ca.readthedocs.io/en/release-1.4/users-guide.html#configuring-an-hsm but trying to do so running the Fabric CA Server as a systemd service according to:…
0
votes
0 answers

How to sign .jar file using token (got from softhsm using pkcs11) by jarsigner?

I am running softhsm in Windows OS.I am getting token info using pkcs11js npm package.I want to know how i can use the token to sign my .jar file in nodejs? Token info getting from softhsm using pkcs11js 'SoftHSM slot ID…
0
votes
1 answer

Expose SoftHSM library to the code running in host machine

I am generating keypairs in SoftHSMv2 using the node-webcrypto-p11 package that is installed locally on my computer. I want to setup a docker container for SoftHSM so that any developer can build the image and run the container using docker file in…
Faisal
  • 403
  • 4
  • 18
0
votes
1 answer

Softhsm2 with pkcs11interop error. Value was either too large or too small for a UInt32

I have following code for softhsm2 test via pkcs11interop library using Net.Pkcs11Interop.Common; using Net.Pkcs11Interop.HighLevelAPI; using Net.Pkcs11Interop.HighLevelAPI80; using System; using System.Collections.Generic; namespace ExportTest { …
Kamran Shahid
  • 3,954
  • 5
  • 48
  • 93