Mansour Dagher wrote:
Hi all,

If certificates and private keys are stored on hardware (Sun Crypto card fo 
example) instead of the filesystem, is there a way in openssl to specify the 
hardware as the location of these certificates.

It appears that openssl (below methods) only takes filesystem directory paths and file names as input
X509_STORE_load_locations()
SSL_CTX_use_PrivateKey_file()
SSL_CTX_use_certificate_chain_file


The Sun Crypto card should be supported by the Solaris PKCS11,
see the cryptoadm list command.

So you could use PKCS11 directly or via the OpenSSL engine.


Any thoughts/suggestions?

Thank you in advance.




______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]



--

 Douglas E. Engert  <[email protected]>
 Argonne National Laboratory
 9700 South Cass Avenue
 Argonne, Illinois  60439
 (630) 252-5444
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to