Hello,

This is an RFC to recreate private keys in the worker process
for PKCS#11, so that HSM keys can be used in -W mode.

- ssl_ckch.c: add map of ckch_data to PEM data
- ssl_sock.c: add map of SSL_CTX* to ckch_data
- maps are implemented using buckets of linked lists
  it is explicit and in the code for easier review instead of using
  more optimized hashmap implementations
- when the SSL context is created and the correct SSL_CTX is assigned
 with SSL_use_SSL_CTX
  the private key data is retrieved just once once, cached, and installed
into the
SSL_CTX;
  this is done in the worker process
- the PEM data has an arbitrary limit of 16384 bytes

Regards
Richard

Reply via email to