Set FORCE_LOGIN via openssl.conf

Peter Huewe PeterHuewe at
Wed Mar 20 14:47:26 UTC 2019


I'm trying to have the pkcs11 do a force login - according to the,
there is an FORCE_LOGIN engine control.

However if I set in my openssl.cnf under the [pkcs11_section] I don't get it to work - there is no login occcuring.
-> How do I have to specify the FORCE_LOGIN in openssl.cnf to have it taken an effect?

I'm trying to do an CSR using 'openssl req -engine pkcs11 -new -key "pkcs11:object=test;type=private;pin-value=123456" -keyform engine'


More information about the p11-glue mailing list