[Openvpn-devel] openvpn - support PKCS#11 smartcards

[Alon Bar-Lev]

Hello,

C. Ruiz, Ivan wrote:

I only changed C_SignRecover to C_Sign and C_SignRecoverInit to C_SignInit (pkcs11.c) and

it worked for me with OpenSC. Can you test if it's OK for you with this minor 
change?

--pkcs11-sign-mode mode
        auto (default) - try to find out which to use.
        recover - use sign recover.
        sign - use sign.

Please tell me if the default works.

Hmmm... It should be SignRecover... strange they don't support it... Anyway, please check the new patch... I've added a new argument:

Apart from this i've tested that I can specify certs both by label and by id <- OK!

I am very glad!!!

Not been able to test under Windows as I don't have the compiler for this platform.

I hope someone will check it out...



Best Regards,
Alon Bar-Lev.

So... Can we drop the request for OpenSC support and focus on PKCS#11?

openvpn-2.0.2-pkcs11-20050912.patch.bz2
Description: Binary data