# Proxy module
#
pam_pkcs11 {
  use_pkcs11_module = p11_kit_proxy;

  pkcs11_module p11_kit_proxy {
    module = /usr/lib/p11-kit-proxy.so;
    description = "PKCS#11 Kit Proxy";
    ca_dir = /etc/security/pam_pkcs11/cacerts;
    crl_dir = /etc/security/pam_pkcs11/crls;
    support_threads = false;
    cert_policy = global_ca,ca,signature;
    token_type = "Proxy";
  }
}
