RE: [Proposal] KeyResolvers

2010-06-18 Thread Pellerin, Clement
On June 14, 2010 10:30 AM, Clement Pellerin wrote: > Now that we know X509IssuerSerialResolver must resolve PrivateKeys, where > does it get it from? > I believe the answer is: the same place where it gets the list of > certificates. > My proposal is to augument the StorageResolver to return an i

RE: [Proposal] KeyResolvers

2010-06-14 Thread Pellerin, Clement
On June 11, 2010 5:56 PM, Chad La Joie wrote: > On 6/4/10 9:15 AM, Pellerin, Clement wrote: > > What is the recommended way to implement a KeyResolver for an EncryptedKey > > where the KEK is a PublicKey? > > > > At first I thought I could write a Resolver for the KEK PrivateKey and let > > the E

Re: [Proposal] KeyResolvers

2010-06-11 Thread Chad La Joie
On 6/4/10 9:15 AM, Pellerin, Clement wrote: What is the recommended way to implement a KeyResolver for an EncryptedKey where the KEK is a PublicKey? At first I thought I could write a Resolver for the KEK PrivateKey and let the EncryptedKeyResolver call it. Unfortunately, the KeyResolverSpi A

RE: [Proposal] KeyResolvers

2010-06-11 Thread Pellerin, Clement
>> From: Pellerin, Clement >> What is the recommended way to implement a KeyResolver for an EncryptedKey >> where the KEK is a PublicKey? >> ... If the library already supports my use case, I would be thrilled to learn how to use it correctly. Otherwise I would like to implement the solution i

[Proposal] KeyResolvers

2010-06-04 Thread Pellerin, Clement
What is the recommended way to implement a KeyResolver for an EncryptedKey where the KEK is a PublicKey? At first I thought I could write a Resolver for the KEK PrivateKey and let the EncryptedKeyResolver call it. Unfortunately, the KeyResolverSpi API can return a SecretKey but there is no prov