| | 1 | While pkcs11-help may provide consistency across openvpn, it does not provide consistency within an OS like Fedora. In Fedora all the PKCS#11 applications and libraries identify objects using PKCS#11 URIs. Pkcs11-helper is a library which does use custom identifiers for objects in smart cards, and thus any user would have to treat and think about smart card objects in openvpn differently. To avoid that, we keep a downstream patch which adds URIs to pkcs11-helper, but if you could switch to engine_pkcs11 for openssl, it would simplify many things for integrators. |
