arm-trusted-firmware/docs/getting_started
Robin van der Gracht 616b3ce27d feat(cert-create): add pkcs11 engine support
Add pkcs11 engine support which allows using keys that are securely
stored on a HSM or TPM. To use this feature the user has to supply
an RFC 7512 compliant PKCS11 URI to a key instead of a file as an
argument to one of the key options. This change is fully backwards
compatible.

This change makes use of the openssl engine API which is deprecated
since openssl 3.0 and will most likely be removed in version 4. So
pkcs11 support will have to be updated to the openssl provider API
in the near future.

Signed-off-by: Robin van der Gracht <robin@protonic.nl>
Change-Id: If96725988ca62c5613ec59123943bf15922f5d1f
2023-09-21 13:27:25 +02:00
..
build-internals.rst build: restrict usage of CTX_INCLUDE_EL2_REGS 2022-12-01 12:04:40 +02:00
build-options.rst feat(cert-create): add pkcs11 engine support 2023-09-21 13:27:25 +02:00
docs-build.rst docs: add instructions for PDF generation of docs 2023-08-10 10:42:14 +01:00
image-terminology.rst docs(build): clarify getting started section 2022-11-16 14:06:48 +00:00
index.rst docs(porting): move porting guide upper in table of contents 2023-04-11 10:11:04 +02:00
initial-build.rst docs(build): clarify getting started section 2022-11-16 14:06:48 +00:00
prerequisites.rst feat(mbedtls): update to 3.4.1 2023-09-12 11:38:56 +02:00
psci-lib-integration-guide.rst docs: update PSCI reference 2023-06-15 09:46:43 +01:00
rt-svc-writers-guide.rst docs: update PSCI reference 2023-06-15 09:46:43 +01:00
tools-build.rst docs(build): clarify getting started section 2022-11-16 14:06:48 +00:00