Sorry, I didn't write that. We don't read key from card. We only set
functions for sign, etc.
When is called e.g. RSA_sign we recognize, that RSA is from card and call
card routines.

Martin

> Bad!  You should use RSA process on card to sign, not retrieve keys.
>
> Andrew Probert
> SecureNet Limited
> Tel +61 3 9690 8877
> Fax +61 3 9690 8171
> Mob +61 4 0941 3028
> http://www.SecureNet.com.au
> http://www.SecureNetCA.com.au
>
>
> -----Original Message-----
> From: Martin Szotkowski [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, 5 December 2000 1:27
> To: konference_OpenSSL_dev
> Subject: engine propose
>
>
> Hi all,
> we are using OpenSSL with smart card. We made hard intervention into
OpenSSL
> code, that enable use smard card as a key file.
> When I use RSA key in file I use standard file, if I want use card, I use
> special file with some setting in this file.
> I simply call PEM_read_bio_RSAPrivateKey() with key_file or card_file and
> use EVP_RSA.
>
> I think this will be good idea for select key from engine or some similar
> action.
> Bad is, to many intervention into many file are needed. But the result is
> perfect and simple for use.
>
> My question is: Is some easier way to achieve this? (I meam, use card_file
> as key_file.)
>
> Martin
>
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> Development Mailing List                       [EMAIL PROTECTED]
> Automated List Manager                           [EMAIL PROTECTED]
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> Development Mailing List                       [EMAIL PROTECTED]
> Automated List Manager                           [EMAIL PROTECTED]

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to