From: David Vašek <david.vasek@nic.cz>
Date: Mon, 27 Sep 2021 14:49:17 +0000 (+0200)
Subject: doc: add details about SoftHSM cryptographic algorithms support
X-Git-Tag: v3.3.dev~335
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a26863e45dc537db45ca4631feb33ea73a597f9b;p=thirdparty%2Fknot-dns.git

doc: add details about SoftHSM cryptographic algorithms support
---

diff --git a/doc/appendices.rst b/doc/appendices.rst
index ee74c4cd28..8b48a9dae5 100644
--- a/doc/appendices.rst
+++ b/doc/appendices.rst
@@ -51,10 +51,10 @@ support.
      - |yes|
      - |yes|
      - |yes|
-   * - `SoftHSM 2.0 <https://www.opendnssec.org/softhsm/>`_
+   * - `SoftHSM 2.0 <https://www.opendnssec.org/softhsm/>`_ [#fn-softhsm]_
+     - |yes|
      - |yes|
      - |yes|
-     - |no|
      - |yes|
      - |yes|
      - |yes|
@@ -99,6 +99,9 @@ support.
      - |yes|
      - |no|
 
+.. [#fn-softhsm] Algorithms supported depend on support in OpenSSL on which SoftHSM relies.
+   A command similar to the following may be used to verify what algorithms are supported:
+   ``$ pkcs11-tool --modul /usr/lib64/pkcs11/libsofthsm2.so -M``.
 .. [#fn-utimaco] Requires setting the number of background workers to 1!
 
 The following table summarizes supported DNSSEC algorithm numbers and minimal