Ability to define custom pkcs wrapper

[ayZagen]

It would be great to have the ability for defining custom pkcs wrapper.
For example: have a look at java lib

than we could use it like this:

pkcs11.load("/usr/local/lib/softhsm/libsofthsm2.dll", "/usr/local/lib/pkcs11wrapper.dll");

[rmhrisk]

Normally these wrappers have their own configuration and act as a passthrough, is your expectation that the additional param would be used to configure these wrapper libraries?

[ayZagen]

I would like to connect to a PKCS#11 module (libsofthsm2 in the example) with the specified PKCS#11-wrapper native library (pkcs11wrapper.dll) and get an interface to it.

[rmhrisk]

Why not specify PKCS11wrapper.dll and configure it to call libsofthsm2?

For example:
https://github.com/xipki/pkcs11wrapper/blob/sunpkcs11/examples/data/pkcs11.properties

[ayZagen]

well, you are definitely right but that would require too much work, for every pkcs module I should create a new dll.

In the example you provided, we can create a jar which can be used with the library I referenced at main post. But that's the whole point for me as I am trying to run away from java :)

This a really specific requirement, I am trying to migrate our e-sign reader from java app (a single jar) to an electron application and some countries have their own pkcs11 implementation. The e-signature providers in those countries only works with that modified lib ( I know that sucks ) and I was able to provide it in a single parameter with that java library.

I am no expert of c++ but I thought it is doable in this library.

EDIT: I ve used dll's but actually my requirement is cross os. so it makes it harder to generate libs.

[microshine]

Could you share information about PKCS11 API you are needed? It'll help me to understand it's hard or not to implement it on C++

[rmhrisk]

He isn’t looking for a PKCS11 library interface, he either wants us to provide a wrapper library for logging details or to configure another wrapper library.

[rmhrisk]

Have you seen FortifyApp.com and Verify.ink?

[ayZagen]

@rmhrisk is right.

I really feel very dumb, I didn't notice fortify. It looks promising and slick let me try it it out

[rmhrisk]

@rmhrisk is right.

I really feel very dumb, I didn't notice fortify. It looks promising and slick let me try it it out

Also check out Hancock.ink