Comments (9)
Dear members of the community,
First of all, let me apologise for the long radio silence in the SoftHSM v2 project.
In this message, we would like to set out the current state of SoftHSM v2 development. Let me start with a bit of history to provide context. SoftHSM v2 was first developed as a successor to SoftHSM, which was originally a component of the OpenDNSSEC project. The rationale for starting SoftHSM v2 was simple: the original SoftHSM had no security features and stored key materials in clear text in a database. SoftHSM was only ever intended as a placeholder PKCS #11 implementation for use with OpenDNSSEC under the assumption that most user of OpenDNSSEC would eventually use a "real" HSM with its own PKCS #11 module and that SoftHSM would only be used for testing and development. When it became clear that many deployments used SoftHSM in production, a decision was made to develop a much more secure successor which we called SoftHSM v2.
Development of SoftHSM v2 was initially done by a development team consisting of staff members of IIS (the registry for .se) and SURFnet (the National Research and Education Network in The Netherlands), both also contributors to OpenDNSSEC. Over time, the team members changed job positions a number of times, and eventually all team members ended up in roles that were incompatible with sustained development work on SoftHSM v2. While team members did occasionally spend time on the code base in their spare time, they do not have sufficient spare cycles to perform maintenance let alone develop new features.
As maintainers of the OpenDNSSEC project, NLnet Labs also worked on SoftHSM v2, verifying and merging pull requests from the community and fixing some of the bugs reported in the issue tracker. At this time, this is also best effort, and no significant development time is available to spend on the project.
Given the above, the current state is that development on SoftHSM v2 is dormant and not likely to pick up significantly in the near future. We are conferring as a team on how to proceed in the future, but this will likely take us until at least the summer of 2024.
I wish I could provide a more definitive outlook for the future.
On behalf of the SoftHSM v2 developers,
Roland van Rijswijk-Deij
from softhsmv2.
The continuous integration seems broken also ?
As for CI there is a PR for a CI via Github Actions in #733, this can probably be extended in many ways,
but I hoped it could help to get other open PRs merged.
While I'm at it, any plan for a new release with all the changes ?
You are right, it seems that 25 merged PRs are not included in a tag/release.
It would be good to get an understanding what we can help out with to enable a new release.
from softhsmv2.
@rijswijk Sorry to @ you like this but as the last merger of this project, can you share some news maybe ?
from softhsmv2.
Well, given the recent activity by @halderen, I think the response to my question is "Yes".
While I'm at it, any plan for a new release with all the changes ? Or are there any more PRs that are targeted for merging ?
from softhsmv2.
It seems that I have talked too soon.
Any update on a future release ?
from softhsmv2.
@antoinelochet from all the dead links on the SoftHSM web site, I would guess the project is no longer being supported? Did you ever receive a response to your three month old query?
from softhsmv2.
I really wish I had.
Some merges happened not so long ago so I think some of the mainteners still drop here from time to time.
from softhsmv2.
Any news on my query ?
from softhsmv2.
Thanks for elaborating, it certainly helps with understanding the current state of this project. Your situation is of course understandable, as priorities and responsibilities shift over time.
I just wanted to put out there that SoftHSM v2 is still an remarkably useful piece of software for anyone working within the niche field of HSMs and PKCS#11 and hope you can work out a plan. At any rate, there is still a decent amount of interest from potential contributors 🙂
from softhsmv2.
Related Issues (20)
- openssl operations involving pcks11 and softHSM result in segfault on exit HOT 9
- AES/GCM multi-part decryption fails with CKR_BUFFER_TOO_SMALL HOT 1
- Unit Tests fails HOT 4
- Make check test fails on OS X HOT 2
- AES key file format for import HOT 1
- Possible problem with v2.6.1 with RHEL8 in FIPS mode and using Java 17 HOT 4
- Documentation for SoftHSM is inaccessible HOT 4
- Coredump / Alma/rhel 9 HOT 2
- decrypting scrambled ciphered text with RSA succeeded on RHEL9 unexpectedly
- SoftHSM on AIX
- Issues with configure option `--with-openssl=PATH`
- Any chance for SignRecover and VerifyRecover implementation? HOT 2
- softhsm2-util AES key import fails whenever a newline character is present in file HOT 2
- Using SoftHSMv2 Token for StrongSwan
- Security: release signing public key: missing and expires 1 August 2024
- Facing problem in Digital Certificate Generation (x.509) using keys stored in softHSM.
- wiki.opendnnsec.org certificate expired?
- https://wiki.opendnssec.org it's down
- A lot of syslog messages for 'generation' file.
- PIN is not asked during delete of a slot
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from softhsmv2.