[Opendnssec-user] running ODS concurrently on one server

Klaus Darilion klaus.mailinglists at pernau.at
Tue Jul 9 16:47:32 UTC 2013



On 09.07.2013 17:27, Casper Gielen wrote:
> Op 09-07-13 16:49, Klaus Darilion schreef:>
>>
>> btw: I just found pkcs11-proxy and some basic testing works fine. Does
>> anybody have practical experience with pkcs11-proxy?
>
> I once tried to built a network-HSM by combining softhsm, pkcs11-proxy
> and stunnel. It worked rather well but was not very stable. As it turned
> out this was not a bug in pkcs11-proxy but a shortcomming in pkcs11 itself.
> I was to do it again I would take a look at p11-kit. There was talk of
> p11-kit working around the problem.
>
> http://lists.nominet.org.uk/pipermail/opendnssec-user/2011-April/001162.html

Hi Casper!

Thanks for the reference. I looked at the p11-kit, but this is rather 
undocumented. I failed using it.

Anybody had success in using p11-kit to proxy the HSM?

Thanks
Klaus



More information about the Opendnssec-user mailing list