On 11/13/09 01:25 PM, Mansour Dagher wrote:
Hi all,

If certificates and private keys are stored on hardware (Sun Crypto
card fo example) instead of the filesystem, is there a way in openssl
to specify the hardware as the location of these certificates.

It appears that openssl (below methods) only takes filesystem
directory paths and file names as input

X509_STORE_load_locations() SSL_CTX_use_PrivateKey_file() SSL_CTX_use_certificate_chain_file


Any thoughts/suggestions?

If you're using Solaris/OpenSolaris or the unbundled pkcs11 engine you might find this interesting:

http://blogs.sun.com/janp/entry/rsa_keys_by_reference_through

-M
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to