libp11: deprecation of PKCS11_generate_key

Regarding the deprecation of PKCS11_generate_key in libp11
(pkcs11_engine),

To generate keypairs in an HSM, I am currently using OpenSSL and
libp11. This is possible from OpenSSL by calling the pkcs11 engine with
control command "KEYPAIR_GEN_CTRL". However, since this functionality (
PKCS11_generate_key) is said to be deprecated in libp11 0.5.0, I ask if
there is another way of doing this.

As far as I understand, unlike the other functions which are to be
deprecated, to generate keys inside of the HSM is not supported
directly by OpenSSL. There must be something I am missing.

Naturally, it would be possible to generate the keys outside of the HSM
and then store them therein, but this is of course not acceptable for
security reasons.

Best regards,
Eliot Roxbergh