Re: other device to store configuration!

2009-04-16 Thread new conf
I m Ok that the whole point of using a smart card is that we can't extract keys.. I learned that OPENSSL using the API pkcs#11 must communication with a middleware called openSC that really comunicate with the card.. the problem is that opensc, do not understand the structure of card if it is non s

Re: other device to store configuration!

2009-04-14 Thread John Dennis
new conf wrote: Hello; I realize that my smart card has a non-standard structure (and private keys are stored in a table) non structured with pkcs#12 or 15. So I have to request it to have that keys. I have the commands to do that. My question is, it is possible to convert the outputs of th sm

Re: other device to store configuration!

2009-04-13 Thread new conf
Hello; I realize that my smart card has a non-standard structure (and private keys are stored in a table) non structured with pkcs#12 or 15. So I have to request it to have that keys. I have the commands to do that. My question is, it is possible to convert the outputs of th smartcard( APDUs in hex

Re: other device to store configuration!

2009-04-07 Thread new conf
Thank you John for your structured questions.. the question that follows is nearly the response for the previous! ..I'm able to reply to all, except the sixth one.. I'll do it :) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: other device to store configuration!

2009-04-02 Thread John Dennis
new conf wrote: Effectively John.. to be able to access the smartcard, I use PCSC lite tool... but the language to communicate is "low level" I'll see about PKCS11 + OpenSSL pscs-lite uses PKCS11 to access the smartcard. I don't think you understand the relationship between all the components y

Re: other device to store configuration!

2009-04-02 Thread new conf
Thank you Arran for trying to help me.. :) Effectively John.. to be able to access the smartcard, I use PCSC lite tool... but the language to communicate is "low level" I'll see about PKCS11 + OpenSSL *Armed with that information you'll be able to ascertain if the current OpenSSL support in FreeR

Re: other device to store configuration!

2009-04-02 Thread John Dennis
new conf wrote: *thank you Stefan, * /Use that path as option to --with-sysconf-dir=/ that means, when compiling the radius at installation? *to Ivan Kalik:* / Best advice - don't do that!!! Certificates are *much* safer on a server than on a USB device - what are you going to do if someone wa

Re: other device to store configuration!

2009-04-02 Thread Arran Cudbard-Bell
On 2/4/09 21:03, new conf wrote: *thank you Stefan, * /Use that path as option to --with-sysconf-dir=/ that means, when compiling the radius at installation? Yes, when you run the configure script. *to Ivan Kalik:* / Best advice - don't do that!!! Certificates are *much* safer on a server

Re: other device to store configuration!

2009-04-02 Thread new conf
*thank you Stefan, * *Use that path as option to --with-sysconf-dir=* that means, when compiling the radius at installation? *to Ivan Kalik:* * Best advice - don't do that!!! Certificates are *much* safer on a server than on a USB device - what are you going to do if someone walks off with it?*

Re: other device to store configuration!

2009-04-02 Thread Stefan Winter
Hi, > I have a question.. and i hope I'll have a reply or an idea!! > If I have to store my files of configuration (eap, keys, randoms, > dh..) in a usb device, have you an idea: how can I configure my > freeradius? Under Linux, you use a USB device by mounting it into the filesystem. I.e. the fi

other device to store configuration!

2009-04-02 Thread new conf
hello to all; I have a question.. and i hope I'll have a reply or an idea!! If I have to store my files of configuration (eap, keys, randoms, dh..) in a usb device, have you an idea: how can I configure my freeradius? thanks you for your help! - List info/subscribe/unsubscribe? See http://www.fre