Re: SmartCards/Tokens recommended for TLS CA under FreeBSD

2015-09-14 Thread Dag-Erling Smørgrav
Dmitry Morozovsky writes: > We used Aladdin Pro (non-Java), but they are long gone, and I could not > reimplement sign tree with sha256 after a dozen of experiments. Aladdin was acquired by SafeNet who have a range of PKI smart cards. I think the SC650 might meet your requirements. It is possi

SmartCards/Tokens recommended for TLS CA under FreeBSD

2015-09-11 Thread Dmitry Morozovsky
Dear colleagues, what vendors/models could you recomment to implement enterprize 2-level CA? We used Aladdin Pro (non-Java), but they are long gone, and I could not reimplement sign tree with sha256 after a dozen of experiments. sha1 and 2k keys is a must, sha256 is almost a must, and 4k/ellypl