pkcs#11 openssl engine for imx8mp yocto

[greeran]

hi

i am building our security BSP on the imx8mp/imx8mm. i was able to add the p11-tools and test it. i would like to be able to bind the openssl with the pkcs11. in the user manual (chapter 10 security) there are not instructions on how to add the pkcs11 engine in the yocto BSP build. from the recipes there is a libpkcs11 but its only for qoriq.

my question is will the qorIQ solution work on the imx8mp or is there a different solution for adding the pkcs11 openssl engine

thanks

[greeran · Accepted solution]

i found the package that adds the pkcs11 openssl engine -- libp11

what i would like to know is in the example in the user guide (chapter 10) they use the p11tool. i see that the p11tool is built by the gnutls but the default is without the p11tool. how do i turn the p11tool configuration on via the yocto image configuration