Boringssl failing when using HSM sign function

[ikaushikc]

Hello All.

I have used "SSL_CTX_set_private_key_method(ctx, &prv_key_method);" function which points to HSM sign function. After creating client certificate and client key the handshake but later again Server sends hello.

I am not sure what is the error why after handshake finished I am seeing sending hello.

I am using below command.

./curl --tlsv1.2 --key client.key --cert client.crt --cacert ca-certificates.crt https://prod.idrix.eu/secure/ --trace /tmp/ko.log

When I have client.key on filesystem it works fine attached log file "working-tls-with-key-onfs.txt"

When I have hsm sign fuction it fails "working-tls-with-key-onhsm.txt" please let me know why server is sending alert.

Regards
Kaushik
working-tls-with-key-onhsm.log
working-tls-with-key-onfs.log