Fedora 45 is moving to OpenSSL 4 which completely removes engines.

SoftHSM2 does not build against OpenSSL 4 either, additionally it does not work well with the provider interfæ due to internal structural issues (uses openssl default context which causes infinite loops with some operations).

Kryoptic implements more algorithms and has fewer bugs, it builds with openssl 4 and does not cause infinite loops when used through pkcs11-prolvider.

Kryoptic provides a helper tool to migrate SoftHSM2 databases to the Kryoptic sqlite based database.