Re: [openssl-users] General approach for keeping a client cert from openssl

2016-12-19 Thread Andy Green
. Yes, it seems it's basically overloading one or more crypto action, so we need to match the action to what it wants to do with the cert key. But I guess to get started, we can do what we have code for. Thanks again I will study it. -Andy > -Kyle H > > On Mon, Dec 19, 2016

[openssl-users] General approach for keeping a client cert from openssl

2016-12-19 Thread Andy Green
Hi - I have a situation coming up that is similar to a client cert being held on a secure key store, like a key vault. We need to be able to perform TLS communication with a remote server using the key, but without giving the key to OpenSSL. The "other side" of the "key vault" is smart, and we c