Mansour, Aleksei, Mark, Dirk-Willem, 

Related, but a little off-center, as all of you seem to have some experience 
with hardware acceleration of OpenSSL. 

Do you really see a significant performance increase? IE, is it worth the 
trouble at this point to offload encryption mathematics, given the speed and 
pricepoints of CPUs themselves? 

We could use either our UltraSPARC or Solarisx86 platforms; any strong 
indications one or the other? 

Lou Picciano 

----- Original Message ----- 
From: "Mansour Dagher" <[email protected]> 
To: [email protected] 
Sent: Friday, November 13, 2009 7:25:30 AM GMT -05:00 US/Canada Eastern 
Subject: openssl and hardware tokens 

Hi all, 

If certificates and private keys are stored on hardware (Sun Crypto card fo 
example) instead of the filesystem, is there a way in openssl to specify the 
hardware as the location of these certificates. 

It appears that openssl (below methods) only takes filesystem directory paths 
and file names as input 

X509_STORE_load_locations() 
SSL_CTX_use_PrivateKey_file() 
SSL_CTX_use_certificate_chain_file 


Any thoughts/suggestions? 

Thank you in advance. 





______________________________________________________________________ 
OpenSSL Project http://www.openssl.org 
Development Mailing List [email protected] 
Automated List Manager [email protected] 

Reply via email to