When using the current code, a token implementation has to set both
engine type and key form, such as in OpenCA::Token::OpenSC, LunaCA3
or my new (not yet submitted) ::nCipher:

Hello
OpenSSL patch from Chrysalis-ITS (now SafeNet) for LunaCA3 does not use
the ENGINEARGS any more.

Best Regards,
Bahaa Al-amood




- introduce a KEYFORM and maybe ENGINEARG argument to
  OpenCA::OpenSSL, just like ENGINE and use it only for the
  commands that require them


- s/-keyform\s+\S+//g or similar for all commands that cannot
  handle a keyform argument

I'd go for the first option.

I volunteer to implement it and resubmit the code.

BTW: the above $keys->{CERT} = $keys->{PEM_CERT} is required and is
missing from all token implementations short of OpenSSL.pm. I'll file
a bug on SourceForge.

cheers

Martin



-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g.

Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
OpenCA-Devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-devel



-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g.
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id149&alloc_id66&op=click
_______________________________________________
OpenCA-Devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-devel

Reply via email to