From 41514e48a26cf0609aa03af31aa756b30f4539ca Mon Sep 17 00:00:00 2001
From: Ian Young <ian@iay.org.uk>
Date: Thu, 26 Mar 2020 12:06:26 +0000
Subject: [PATCH] Add support for development signing using SoftHSMv2 on macOS

See ukf/ukf-meta#221.
---
 macosx.properties               | 4 ++++
 mdx/uk/softhsm-mac-macports.cfg | 8 ++++++++
 2 files changed, 12 insertions(+)
 create mode 100644 mdx/uk/softhsm-mac-macports.cfg

diff --git a/macosx.properties b/macosx.properties
index d6e1086d..4c96ed0e 100644
--- a/macosx.properties
+++ b/macosx.properties
@@ -28,6 +28,10 @@ sign.uk.pkcs11Config = ${basedir}/mdx/uk/opensc-mac.cfg
 # For a Yubikey, use this override in build.properties:
 #
 #sign.uk.pkcs11Config = ${basedir}/mdx/uk/yubikey-mac.cfg
+#
+# For the SoftHSMv2 soft token, use this override in build.properties:
+#
+#sign.uk.pkcs11Config = ${basedir}/mdx/uk/softhsm-mac-macports.cfg
 
 #
 # Signing key alias within the keystore.
diff --git a/mdx/uk/softhsm-mac-macports.cfg b/mdx/uk/softhsm-mac-macports.cfg
new file mode 100644
index 00000000..1024d0df
--- /dev/null
+++ b/mdx/uk/softhsm-mac-macports.cfg
@@ -0,0 +1,8 @@
+#
+# PKCS#11 provider configuration for for SoftHSM running under macOS.
+#
+# Note: this configuration assumes that SoftHSM has been installed using
+# the MacPorts system.
+#
+name = SoftHSM
+library = /opt/local/lib/softhsm/libsofthsm2.so