Is SAML SP supported with HSM ?

[Cantor, Scott]

On 8/2/19, 5:43 AM, "dev on behalf of Amit Thukral" <dev-bounces at shibboleth.net on behalf of amit.thukral403 at gmail.com> wrote:

> Does shibboleth support the key to be picked up from another HSM store? 

No. OpenSSL does but I don't think the combinations of libraries involved would "just work" trying to use the engine support in it without substantial work. And keys are not "picked up" from a store, they don't leave it. The crypto itself has to be running on the HSM. Much of Santuario would need work for this to be possible.

-- Scott