HSM & KMS keys

[gamringer]

I am looking for an x509 library to use with keys where the private material is unavailable. I would simply write a new Crypto subclass, but the general architecture of these libs assume that it is loading a private key file rather than possibly just a reference address to an externally stored private key, like one stored in an HSM available via PKCS11, or in a KMS.

I have a few suggestions if you are open to it.

I am the author of the recently published PKCS11 Extension.