Support p11kit in OpenSSL
Context
p11kit is the only way to access host CA certificates. GnuTLS and recently nss have support. The outlier is OpenSSL which doesn't have p11kit integration.
Description
https://github.com/OpenSC/libp11 seems to provide some glue for this "pkcs11 engine plugin for the OpenSSL library allows accessing PKCS#11 modules in a semi-transparent way."
Acceptance Criteria
opensslclient can access a site which cannot be accessed through runtime certificates but need host certs.
Edited by Seppo Yli-Olli