this enables adding new properties while not breaking the interface.

Due to openssl-3 compatibility, thanks to t0b3

make nss happy with its own extensions and non-standard behavior.

Starting from version 1.1.1, OpenSSL includes routines
like RSA_meth_xxx and DSA_meth_xxx. pkcs11-helper includes
implementation of those routines. That code is compiled if
they're missing from OpenSSL.

nmake build uses pre-generated config-w32-vc.h, which lacks
defines which indicate that OpenSSL includes above routines,
which causes pkcs11's own implementaion to be compiled. However,
pkcs11-helper implementation is not compatible with OpenSSL 1.1.1 -
for example, it takes size of opaque struct RSA_METHOD, which
has become internal in OpenSSL.

This adds necessary defines to config header used by nmake build
so that pkcs11-helper code, which is not compatible with OpenSSL 1.1.1,
is not compiled.

Also libeay is changed to libcrypto.

Signed-off-by: Lev Stipakov <lev@openvpn.net>

Add additional API that allows passing of the mechanism
struct instead of just the mechanism type to private key
operations. This is needed to support paddings
schemes such as PSS that require additional entries in the
CK_MECHANISM structure.

No change in functionality.

Signed-off-by: Selva Nair <selva.nair@gmail.com>

Signed-off-by: Selva Nair <selva.nair@gmail.com>

This changes removes polarssl compatibility.

Signed-off-by: Simon Rozman <simon@rozman.si>

In protected authentication C_Login may take a while to complete

the atfork child is guarenteed to be run before any child logic.

developers are instructed to call fork fixup before any logic.