]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
pkcs11-provider project has new home
authorMichal Nowak <mnowak@isc.org>
Wed, 25 Mar 2026 09:47:42 +0000 (10:47 +0100)
committerMichal Nowak <mnowak@isc.org>
Wed, 25 Mar 2026 11:09:13 +0000 (12:09 +0100)
(cherry picked from commit bf56489c4551b11680c82e384855e71ef960f82e)

doc/arm/pkcs11.inc.rst

index b6457295ad3fb84944b741d3e31af79d96772ee6..60aa17cc043e03cfff28ceaa9fb2f96864ca8692 100644 (file)
@@ -27,7 +27,7 @@ BIND 9 accesses PKCS#11 libraries via OpenSSL extensions. The extension for
 OpenSSL 3 and newer is `pkcs11-provider`_; for older OpenSSL versions,
 engine_pkcs11 from the `OpenSC`_ project can be used.
 
-.. _`pkcs11-provider`: https://github.com/latchset/pkcs11-provider
+.. _`pkcs11-provider`: https://github.com/openssl-projects/pkcs11-provider
 .. _OpenSC: https://github.com/OpenSC/libp11
 
 In both cases the extension is dynamically loaded into OpenSSL and the HSM is
@@ -188,7 +188,7 @@ The canonical documentation for configuring pkcs11-provider is in the
 `provider-pkcs11.7`_ manual page, but a copy of a working configuration is
 provided here for convenience:
 
-.. _`provider-pkcs11.7`: https://github.com/latchset/pkcs11-provider/blob/main/docs/provider-pkcs11.7.md
+.. _`provider-pkcs11.7`: https://github.com/openssl-projects/pkcs11-provider/blob/main/docs/provider-pkcs11.7.md
 
 In this example, we use a custom copy of OpenSSL configuration,
 driven by an environment variable called OPENSSL_CONF. First, copy the
@@ -232,7 +232,7 @@ Add the following lines at the bottom of the file:
    module = <PATHTO>/pkcs11.so
    pkcs11-module-path = <FULL_PATH_TO_HSM_MODULE>
    # bind uses the digest+sign api. this is broken with the default load behaviour,
-   # but works with early load. see: https://github.com/latchset/pkcs11-provider/issues/266
+   # but works with early load. see: https://github.com/openssl-projects/pkcs11-provider/issues/266
    pkcs11-module-load-behavior = early
    # no-deinit quirk is needed if you use softhsm2
    #pkcs11-module-quirks = no-deinit