Name

OpenXPKI::Crypto::Backend::OpenSSL::Engine::LunaGem

Description

This class implements an interface to use the Gemalto Luna HSM.

This class sets "-engine gem -keyform engine" and does not support any additional engine parameters. It is required that the HSM is unlocked, the OpenXPKI server user/group must be properly chosen so the daemon can access the HSM, this is usually achieved by running OpenXPKI and the HSM service with the same group.

Configuration

Set engine: LunaGem and set the key attribute of your token to the label of the HSM key.

Functions

get_engine

returns the used OpenSSL engine 'gem'.

get_keyform

returns "engine" because otherwise the use of this module makes no sense.