This is possible on nightly now and the next 26.x release possibly tomorrow. Node.js loads OpenSSL STORE provider backed keys. In these examples a tiny KMS one i'm cooking up, in CI we're testing with pkcs11-provider.
The URL input being resolved with a STORE is what's new.
Did you move off of Node.js v20.x yet? There are only a couple weeks util its EOL. Save yourself the headache of scrambling to upgrade next year and jump straight to v24.x LTS
Introducing CWS, CSS Web Signatures. A security token scheme that runs entirely in the browser's style engine. No JavaScript. No WebAssembly. No server-side computation.
Spec + interactive demo: panva.github.io/CS24