PKCS#11 engine implementation

[Evan Hunt]

> What version of the original OpenSolaris patch is the openssl-0.9.8l-patch in
> the 9.7.0 tarball based on?

2009-03-11.

More specificaly, pkcs11_engine-0.9.8j.patch.2009-03-11, applied to 0.9.8k
as explained in http://blogs.sun.com/janp/entry/pkcs_11_engine_patch_for1.

> What has been changed/added?

Principally:

  1) ability to access key by reference
  2) (relatively) user-friendly PIN management
  3) ported to WIN32
  4) separate "crypto-accelerator" and "sign-only" engines (see the 9.7.0
     Administrator's Reference Manual, section 4.11, for details)

-- 
Evan Hunt -- each at isc.org
Internet Systems Consortium, Inc.