Erwann ABALEA wrote:
>
> On Wed, 24 Feb 1999, Sergio Rabellino wrote:
>
> > Hi,
> > anyone has used the ssleay/openssl certificates with smartcards
> > (tokens)
> > 1024bits key enabled, inside the browsers like Netscape or IE/Outlook ?
>
> We work with Gemplus, who sells crypto smartcards to be used with IE4 and
> Netscape 4.04+. (I previously was a Gemplus developper)
>
> I have such cards, and I quickly developped a certificate server, and it
> works. The private key and the corresponding certificate is stored on the
> GemSAFE card, and all the private crypto operations are well performed by
> the card.
>
> Nothing special is required from OpenSSL, it works perfectly.
>
> What I'd like to try is the PKCS#11 stuff with these smartcards (there's a
> PKCS#11 module for Netscape browsers).
>
We used this interface to integrate our SETCOS Cards with B1 reader into
Netscape.
Integrating it into SSLeay was a bit more complicated since many
functions
assume to have the key in memory (accessing RSA parameters e.g.).
--
Ciao ... Heiko Nardmann (Dipl.-Ing.)
Software Development, secunet (www.secunet.de)
Security Networks GmbH, Weidenauer Str. 223-225, D-57076 Siegen
Tel. : +49 271 48950-13 Fax : +49 271 48950-50
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
