- Program: Authoritative
- Issue type: Feature request
Short description
Have a new config option to gate using p11kit on (in addition to the build-time option).
Usecase
Debian (and I think the upstream debs) enable the experimental-pkcs11 support.
It seems beneficial to allow interested users to use it, but everyone else to safely ignore it.
Additionally it was found that merely installing softhsm2 breaks startup of pdns-server, as it will try to init softhsm2 and fail then.
Description
By default it should be disabled!
Short description
Have a new config option to gate using p11kit on (in addition to the build-time option).
Usecase
Debian (and I think the upstream debs) enable the experimental-pkcs11 support.
It seems beneficial to allow interested users to use it, but everyone else to safely ignore it.
Additionally it was found that merely installing softhsm2 breaks startup of pdns-server, as it will try to init softhsm2 and fail then.
Description
By default it should be disabled!