Re: [twsocket] ICS SSL PKCS11
Hello Arno, Yes, interesting to be able to use SmartCards with X.509 + PIN code for strong authentication. For example every french doctor own a smartcard containing two X.509 certificates, one for signing and one for authentication. Regards. AG> Interesting new feature anyway! If you want to implement it in ICS I AG> vote for it. BTW: I'm still looking for an easy solution to use the AG> Windows certificate store directly in OpenSSL rather than a copy into AG> PEM file(s). >> I already used OpenSSL + PKCS11 engine and also Stunnel successfully, >> that's why I want try to do it with using Delphi+ICS to get better >> integration than using external Stunnel. I am trying ICSv6 SSL for the first time (Delphi 7), and I am wondering if it can support PKSC11 engine (authentication using certificates stored into smartcards protected by a PIN code) ? >> >>> I think it can be achieved with OpenSSL and a PKCS11 engine, just >>> found this link: http://www.opensc-project.org/engine_pkcs11 >>> It's likely that the ICS source code would have to be changed. >> >>> -- >>> Arno Garrels -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] ICS SSL PKCS11
Dod wrote: > Hello Arno, > > I already used OpenSSL + PKCS11 engine and also Stunnel successfully, > that's why I want try to do it with using Delphi+ICS to get better > integration than using external Stunnel. Interesting new feature anyway! If you want to implement it in ICS I vote for it. BTW: I'm still looking for an easy solution to use the Windows certificate store directly in OpenSSL rather than a copy into PEM file(s). -- Arno Garrels > > regards. > >> Dod wrote: >>> Hello, >>> >>> I am trying ICSv6 SSL for the first time (Delphi 7), and I >>> am wondering if it can support PKSC11 engine (authentication >>> using certificates stored into smartcards protected by a PIN code) ? > >> I think it can be achieved with OpenSSL and a PKCS11 engine, just >> found this link: http://www.opensc-project.org/engine_pkcs11 >> It's likely that the ICS source code would have to be changed. > >> -- >> Arno Garrels -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] ICS SSL PKCS11
Hello Arno, I already used OpenSSL + PKCS11 engine and also Stunnel successfully, that's why I want try to do it with using Delphi+ICS to get better integration than using external Stunnel. regards. AG> Dod wrote: >> Hello, >> >> I am trying ICSv6 SSL for the first time (Delphi 7), and I am >> wondering if it can support PKSC11 engine (authentication using >> certificates stored into smartcards protected by a PIN code) ? AG> I think it can be achieved with OpenSSL and a PKCS11 engine, just found AG> this link: http://www.opensc-project.org/engine_pkcs11 AG> It's likely that the ICS source code would have to be changed. AG> -- AG> Arno Garrels -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] ICS SSL PKCS11
Dod wrote: > Hello, > > I am trying ICSv6 SSL for the first time (Delphi 7), and I am > wondering if it can support PKSC11 engine (authentication using > certificates stored into smartcards protected by a PIN code) ? I think it can be achieved with OpenSSL and a PKCS11 engine, just found this link: http://www.opensc-project.org/engine_pkcs11 It's likely that the ICS source code would have to be changed. -- Arno Garrels -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
[twsocket] ICS SSL PKCS11
Hello, I am trying ICSv6 SSL for the first time (Delphi 7), and I am wondering if it can support PKSC11 engine (authentication using certificates stored into smartcards protected by a PIN code) ? Regards. -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
