On Friday 01 November 2002 15:47, Jon wrote: > [...] > The METACenter and Mario Strasser do have a > PKINIT patch for Heimdal Kerberos [3], but it seems to me that the > patch accesses the smartcard through the pc/sc library via pcsclite > (I could totally be off on this as I am quite novice with > programming). > [...] Currently, the heimdal PKINIT patch as well as the patch for the pam_krb5 module (http://www.zhwin.ch/~sri/kerberos_pkinit/) only support the Schlumberger Cryptoflex Win2k smartcard in form of an OpenSSL ENGINE module. However, PKCS #11 support is planed and AFAIK David Corcoran is already working on it (correct me if I'm wrong). Further, there were some discussions on the OpenSSL list about different PKCS #11 ENGINE projects, recently. I'll have a closer look at the mentioned projects and if one of them looks good to me, try to include it. Anyway, as the PKINIT patch does also include Globus support, which is PKCS #11 capable, one should already be able to use PKCS #11 modules with the Heimdal PKINIT patch.
Regards, Mario _______________________________________________ Muscle mailing list [EMAIL PROTECTED] http://lists.musclecard.com/mailman/listinfo/muscle
