sudo apt-get install  libengine-pkcs11-openssl
sudo apt-get install opensc
sudo apt-get install softhsm


sudo apt-get install  libengine-pkcs11-openssl  opensc  softhsm



export SOFTHSM2_TOKEN_DIR=~/softhsm2_token

rm -rf  ${SOFTHSM2_TOKEN_DIR}

mkdir  ${SOFTHSM2_TOKEN_DIR}

export SOFTHSM2_CONF=${SOFTHSM2_TOKEN_DIR}/softhsm2.conf

echo "directories.tokendir = ${SOFTHSM2_TOKEN_DIR}/" > ${SOFTHSM2_CONF}

cat  ${SOFTHSM2_CONF}

export PKCS11_MODULE_PATH=/usr/lib/x86_64-linux-gnu/softhsm/libsofthsm2.so

pkcs11-tool -L --module ${PKCS11_MODULE_PATH}

# ./hsm_ahab_pki_tree.sh:96:    USR_PIN=123456
# ./Dockerfile.hsm:72:ENV SO_PIN 654321

pkcs11-tool --module ${PKCS11_MODULE_PATH} --init-token --init-pin --so-pin=654321 --new-pin=123456 --label="CST-HSM-DEMO" --pin=123456 --login
 
pkcs11-tool -L --module ${PKCS11_MODULE_PATH}


cst-3.4.0/keys

pkcs11-tool --module ${PKCS11_MODULE_PATH} -l --pin 123456 --list-objects



./hsm_ahab_pki_tree.sh -existing-ca n  -use-ecc y -kl p384 -da sha384 -duration 10 -srk-ca n

pkcs11-tool --module ${PKCS11_MODULE_PATH} -l --pin 123456 --list-objects

cst-3.4.0/crts
../linux64/bin/srktool -a -s sha384 -t SRK1234table.bin -e SRK1234fuse.bin -f 1 -c SRK1_sha384_secp384r1_v3_usr_crt.pem,SRK2_sha384_secp384r1_v3_usr_crt.pem,SRK3_sha384_secp384r1_v3_usr_crt.pem,SRK4_sha384_secp384r1_v3_usr_crt.pem


cst-3.4.0/code/build
sudo apt-get install byacc
OSTYPE=linux64 TOOLCHAIN=gcc make -f make/binaries.mk

../code/build/cst -b pkcs11 -i csf_boot_image.txt  -o flash.singed.bin