1 files changed, 37 insertions, 0 deletions
diff --git a/conf/plugins/pkcs11.conf b/conf/plugins/pkcs11.conf
new file mode 100644
index 000000000..35248c2ce
--- /dev/null
+++ b/conf/plugins/pkcs11.conf
@@ -0,0 +1,37 @@
+pkcs11 {
+
+    # Whether to load the plugin. Can also be an integer to increase the
+    # priority of this plugin.
+    load = yes
+
+    # Whether to load certificates from tokens.
+    # load_certs = yes
+
+    # Reload certificates from all tokens if charon receives a SIGHUP.
+    # reload_certs = no
+
+    # Whether the PKCS#11 modules should be used for DH and ECDH (see use_ecc
+    # option).
+    # use_dh = no
+
+    # Whether the PKCS#11 modules should be used for ECDH and ECDSA public key
+    # operations. ECDSA private keys can be used regardless of this option.
+    # use_ecc = no
+
+    # Whether the PKCS#11 modules should be used to hash data.
+    # use_hasher = no
+
+    # Whether the PKCS#11 modules should be used for public key operations, even
+    # for keys not stored on tokens.
+    # use_pubkey = no
+
+    # Whether the PKCS#11 modules should be used as RNG.
+    # use_rng = no
+
+    # List of available PKCS#11 modules.
+    modules {
+
+    }
+
+}
+