[PATCH] Add PKCS#11 support to nginx http module

Dmitrii Pichulin pdn at cryptopro.ru
Tue Nov 11 10:07:03 UTC 2014

>     It was tested, example:
>     http://mailman.nginx.org/__pipermail/nginx-devel/2014-__October/006151.html
>     <http://mailman.nginx.org/pipermail/nginx-devel/2014-October/006151.html>
> Indeed, but the example runs a single server instance.
> How does it behave if you have "multiple" server instance (say 443,
> 8443) with different key-pairs (slot_0-id_00 and slot_0-id_01).
> Could you make sure everything work as expected by creating another
> key-pair on the token, sign a new certificate and check that the two
> instances can run concurrently ?

It's just an example, you can repeat some steps.

And, yes, we tested it on a multiple servers config, it scales well.

More information about the nginx-devel mailing list