Where does the OSSL_OBJECT_SKEY come from?

[mgrzeschik]

Is this some new object that is currently under development? I would like to use the skey support and make use of the internal stored skey aes in the pkcs11-hsm to cipher some block data. However this seem to be not possible as far as I can see. using openssl enc with skeymgmt and skeyopts does not let me select the internal stored secret-key. Is there some code in flux that is not yet commited?

[beldmit]

What do you exactly want from OpenSSL side that is missing now? I can consider it

[simo5]

At the moment it can only be imported because there is no real STORE support on the OpenSSL side.
There are some tricks that could be used to "import" a key that is actually already stored on the token, but they are generally not useful beyond testing.

The SKEY feature is pretty much in its infancy and developing upstream.

[mgrzeschik]

I don't know if this is the tricks you are mentioning but I implemented something that at least works now:

• skeymgmt: add support to import skeyopt pkcs11_uri #573