Re: [Openvpn-devel] [PATCH] pkcs11: Load p11-kit-proxy.so module by default

2014-12-16 Thread Steffan Karger
ACK. Using smartcards really improves secuirty, but pkcs11 can have a steep learning curve. Making it easier for users is a good thing. -Steffan On 11-12-14 14:03, David Woodhouse wrote: > If the user specifies --pkcs11-id or --pkcs-id-management but neglects > to explicitly provide a

[Openvpn-devel] [PATCH] pkcs11: Load p11-kit-proxy.so module by default

2014-12-11 Thread David Woodhouse
If the user specifies --pkcs11-id or --pkcs-id-management but neglects to explicitly provide a --pkcs11-provider argument, and if the system has p11-kit installed, then load the p11-kit proxy module so that the system-configured tokens are available. Trac: 490 Signed-off-by: David Woodhouse