On Fri, Jun 20, 2014 at 6:20 PM, Petr Spacek <[email protected]> wrote:

> Unfortunately, it is absolutely crucial feature and we can't migrate to v2
> until we find a way how to do key exports.
>
> I understand that it is not desirable to enable this by default, it is
> perfectly fine to provide key export in separate binary (i.e. not built-in
> into softhsm2-util).
>
> Could you point me to the right part of the code in SoftHSM so I can take
> a look if it is feasible to do key extraction, please?
>

Are you looking for the functions C_WrapKey() and C_UnwrapKey()?

https://github.com/opendnssec/SoftHSMv2/blob/develop/src/lib/SoftHSM.cpp#L4792
https://github.com/opendnssec/SoftHSMv2/blob/develop/src/lib/SoftHSM.cpp#L5066

// Rickard
_______________________________________________
Opendnssec-user mailing list
[email protected]
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user

Reply via email to