Re: secure key storage APIs

2006-09-11 Thread Ivan Krstić
Travis H. wrote: > Does anyone know of any OSS OS facilities for managing keys? Take a look at the GNOME Keyring: http://en.wikipedia.org/wiki/GNOME_Keyring http://cvs.gnome.org/viewcvs/gnome-keyring/ In addition, various frontends exists to GnuPG, e.g. KGPG. It's not yet clear, but I might ha

Re: secure key storage APIs

2006-09-11 Thread Ivan Krstić
Perry, please merge with my previous message; I hit 'send' by mistake. Also, the following are of general interest: Henson S., `Netscape certificate database info`: http://www.drh-consultancy.demon.co.uk/cert7.html Henson S., `Netscape key database format`: http://www.drh-consultancy.dem

Re: secure key storage APIs

2006-09-11 Thread Thomas
> Any considerations that I'm missing? Something more general then *-agent but not part of the core-OS might be Novell's CASA. AFAICR it is open source and part of newer SUSE Linux distributions... Thomas -- Tom <[EMAIL PROTECTED]> fingerprint = F055 43E5 1F3C 4F4F 9182 CD59 DBC6 111A 8516 8

secure key storage APIs

2006-09-08 Thread Travis H.
Hey, Does anyone know of any OSS OS facilities for managing keys? With ssh-agent and gpg-agent providing access to key storage by inherited processes, and the keys themselves being vulnerable as stored on-disk, I wonder if there isn't any more general facility for doing key management and access