[Opendnssec-develop] Sun SCA6000 on Ubuntu

[roy at nominet.org.uk]

"Rickard Bondesson" <rickard.bondesson at iis.se> wrote on 06/30/2009 12:50:48
PM:

> > Try mca_enable_sha512=1
> >
> > This is the sha2 family.
>
> This will only enable sha512. SCA6K does not have any support for
> sha256. I believe that sha256 is provided by the libpkcs11 on
> Solaris. So on a non-Solaris OS, you will use the libopencryptoki
> which does not do that.

My mistake. sha512 is part of the sha2 family. This leads to a new
question,

In case of lack of support for certain functions by an HSM, do we provide
an alternative just for that function? We might use softHSM just for the
hashing, right?

Roy