pkcs11_softtoken SSL key derivation is still casting object handles
One other leftover from #12856 the
soft_ssl_key_and_mac_derive function is still casting object handles into pointers. This code is fairly old and specific for use with SSL3 (!) and TLS 1.0. AFAIK the old SunOne/Java/... web server was the only thing that used this.
Since the casting is largely dealing with key creation failures, actually testing this will be tricky.