HSM Code Signing Tool for Debian 12

fsylla — Tue, 29 Apr 2025 07:33:21 GMT

Hi!

we are currently using the HSM code signing tool built from code/back_end-hsm in the cst-3.3.1 source tree on a Debian 11 host.
We need to update to Debian 12 but the cst version 3.3.1 doesn't work any longer due to compatibility issues with OpenSSL 3.0.15.
Is it possible to get a more recent version of back_end-hsm that works with Debian 12?

I downloaded IMX_CST_TOOL_NEW.tgz that seems to be version 4.0.0 but it doesn't contain the back_end_hsm folder any longer.

Kind regards
Frank Sylla

Re: HSM Code Signing Tool for Debian 12

fsylla — Tue, 29 Apr 2025 13:29:45 GMT

Now there are several backends in one binary.
For the HSM backend we have to call cst -b pkcs11 ...

linux64/bin/cst works well with Debian 12 if we do a
export PKCS11_MODULE_PATH=/usr/lib/x86_64-linux-gnu/p11-kit-proxy.so
before.

Kind regards
Frank

topic HSM Code Signing Tool for Debian 12 in i.MX Processors

HSM Code Signing Tool for Debian 12

Re: HSM Code Signing Tool for Debian 12