Hi Kent, On September 29, 2005 12:28 pm, Kent Yoder wrote: > I've been looking into enabling apache+mod_ssl to use hardware keys > encrypted by a TPM. I have openssl's s_server test working using an > openssl TPM engine [1] and trousers [2]. It looks like the key to > getting this working in apache is support for engine format keys in > mod_ssl. Is there any interest in enabling engine format keys in > mod_ssl, or, is there another path to accomplish what I'm trying to > do?
Sorry I didn't notice this earlier. I added some hooks to modssl ages ago to support engine ctrl-commands if that helps. In fact you may have to jiggle with this patch if you want to update it to the latest mod_ssl version, but it may be easier than redoing it from scratch; http://www.geoffthorpe.net/crypto/ If you get it running with a more recent version and feel like giving me a newer diff, I'd appreciate being able to replace the one on my site. I don't think Ralf wants to include this functionality now that mod_ssl is just in maintenance-mode and (kinda) deprecated in favour of apache2. Cheers, Geoff -- Geoff Thorpe [EMAIL PROTECTED] http://www.geoffthorpe.net/ Même ceux qui se sentent pas des nôtres, ne nous voyant plus à genoux, seront, plus que jamais, chez eux chez nous. -- Loco Locass ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@modssl.org Automated List Manager [EMAIL PROTECTED]
