demo

README

Demo Program

A demo program using a PKCS#11-protected key to authenticate a web server.

To use with nShield PKCS#11, assuming an OCS-protected key:

generatekey -b pkcs11req protect=token type=rsa size=2048 plainname=demo \
  selfcert=yes embedsavefile=hkey.pem digest=sha256 \
  x509country=GB x509province=England x509locality=Rutland x509org=org x509orgunit=any \
  x509dnscommon=www.example.com
CKNFAST_DEBUG=2 CRYPTO11_CONFIG_PATH=../configs/config.nshield go run server.go

plainname corresponds to CKA_LABEL.

Documentation

Overview

A demo program using a PKCS#11-protected key to authenticate a web server.

To use with nShield PKCS#11, assuming an OCS-protected key:

generatekey -b pkcs11req protect=token type=rsa size=2048 plainname=demo \
  selfcert=yes embedsavefile=hkey.pem digest=sha256 \
  x509country=GB x509province=England x509locality=Rutland x509org=org x509orgunit=any \
  x509dnscommon=www.example.com
CKNFAST_DEBUG=2 CRYPTO11_CONFIG_PATH=../configs/config.nshield go run server.go

'plainname' corresponds to CKA_LABEL.