Commit 606435b335 for bind
commit 606435b3359b9777a0b9ba93b81a0bf87ace1609
Merge: c28393ede0 62b563d6a0
Author: Aydın Mercan <aydin@isc.org>
Date: Mon Oct 12 18:21:20 2026 +0300
fix: dev: Replace SoftHSMv2 with Kryoptic in the PKCS#11 system tests
SoftHSMv2 made the enginepkcs11 and keyfromlabel system tests fail at random: key generation through pkcs11-provider returned CKR_GENERAL_ERROR when named created keys for many zones at
once, after which named backed off for ten minutes. The tests now use Kryoptic as the software token, selected with the BIND9_TEST_KRYOPTIC_MODULE environment variable, and render
their own OpenSSL and Kryoptic configuration, so OPENSSL_CONF and SOFTHSM2_CONF no longer have to be set to run them. PKCS#11 labels for key-store keys may now be as long as a private
key file field, so a pin-source with an absolute path no longer makes key generation fail with "ran out of space".
Closes #4695
Merge branch '4695-pkcs11-replace-softhsm' into 'main'
See merge request isc-projects/bind9!12827