[Opendnssec-develop] proposed libhsm API

Ray.Bellis at nominet.org.uk Ray.Bellis at nominet.org.uk
Fri Apr 24 11:39:49 UTC 2009


re:

  const hsm_key_t *hsm_generate_rsa_key(unsigned long keysize);

Do we need a parameter to say _which_ HSM the key will be generated on. 
For instance, when adding a second HSM to an existing system (so that the 
old can be eventually decommissioned) we might need to specify that all 
news keys are created on the new HSM and not on the old one.

(unless that's part of the automagic .xml configuration ?)

Ray
 



More information about the Opendnssec-develop mailing list