Wondered if anyone had an interest in using engine_pkcs11 with Apache. I have a working patch (it's not finished yet, but it works). I've been load testing it over time and it's performing nicely, no obvious memory leaks and my other test cases (using PEMs and engine chil still work normally).
I'm testing engine_pkcs11 with nss (mod_nss just wasn't working fully, especially with mod_proxy). I've tested with nCipher as well, which doesn't work, but there's the chil engine for that. I'll be refining it (there are two hacks I need to remove, one into engine_pkcs11 and another to openssl), and if I have time I'll look at seeing what I can do about makeing it work with nCipher, but that might require a bit of a shift in how mod_ssl deals with children. I'd be interested to see if it works for others and if there are any improvements others can suggest before I submit it to Apache. R. Marc _______________________________________________ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel
