With this provider for OpenSSL you can use the OpenSSL library (version 3) and command line tools with any PKCS11 implementation as backend for the crypto operations.