Using key, secured by TPM2, in mTLS request

Corinna Brandt via curl-library <[email protected]>
Newsgroups gmane.comp.web.curl.library
Message-ID <FR1PPF3B45003C8EB6357B3FD9E1DF89011A8F62@FR1PPF3B45003C8.DEUP281.PROD.OUTLOOK.COM>
Hello everyone,

In a project, I am currently working on, we are updating the OpenSSL library, to use OpenSSL 3.
One of the main features we use, is to generate keys, which are secured by the TPM. In OpenSSL 3, they changed the access to this from engines to providers. I'm now trying to incorporate this change when creating a CURL request with mTLS, which needs to use a key secured by TPM.

Previously, I was able to access this key using the CURLOPT_SSLENGINE, to access keys secured by TPM:
CURLcode curl_easy_setopt<https://curl.se/libcurl/c/curl_easy_setopt.html>(CURL *handle, CURLOPT_SSLENGINE<https://curl.se/libcurl/c/CURLOPT_SSLENGINE.html>, char *id);

I have not yet found out, how it is possible to load a tpm2 provider, before libcurl tries to access the private key.

Information on my system:
OS: Debian 12
SSL: OpenSSL 3.0
TPM2 provider: https://github.com/tpm2-software/tpm2-openssl

Kind Regards,
Corinna

-- 
Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library
Etiquette:   https://curl.se/mail/etiquette.html
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.