Module rustls_signer 

PKCS#11-backed signing key for rustls TLS handshakes.

Implements [rustls::sign::SigningKey] and [rustls::sign::Signer] by delegating all signing operations to HsmContext::sign_data. The private key never leaves the HSM — only the signature bytes are returned.

Structs

Pkcs11SigningKey

A rustls [SigningKey] backed by a PKCS#11 token in Kryoptic.

Functions

certificate_algorithm

Derive TLS algorithms from certified public-key material, never URI spelling.

verify_tls_key

Validate key possession and signature-mechanism support before serving TLS.