RE: [Openvpn-devel] RE: [Openvpn-users] openvpn, smartcards and PKCS#11

2005-09-06 Thread Alon Bar-Lev
Erich Titl wrote: > maybe I am completely off topic but I am using an ikey 1000 on a Windoze box with standard openvpn. AFAIK the ikey 1000 provides a > PKCS#11 interface which (at least on windoze) is handled by the proprietary driver. > This token only handles storage of the keys. I believe th

Re: [Openvpn-devel] RE: [Openvpn-users] openvpn, smartcards and PKCS#11

2005-09-06 Thread Erich Titl
Alon maybe I am completely off topic but I am using an ikey 1000 on a Windoze box with standard openvpn. AFAIK the ikey 1000 provides a PKCS#11 interface which (at least on windoze) is handled by the proprietary driver. This token only handles storage of the keys. I believe the engine is onl

[Openvpn-devel] RE: [Openvpn-users] openvpn, smartcards and PKCS#11

2005-09-06 Thread Alon Bar-Lev
James Yonan wrote: > Thanks for the interesting information on PKCS#11, OpenSSL, and smartcards. You are welcome... I now doing a phase on all open-source projects that uses cryptographic but do not use smartcards... In a standard way... :) > Any rough idea on what percentage of the cheaply avai

Re: [Openvpn-devel] Re: OpenVPN Protocol

2005-09-06 Thread Mark Beyer
> The big question in my mind is whether this possibly small increase in > performance will justify the loss of portability, and some level > of stability and security. > > James > Agreed. Is performance such a big issue anyway ? At least for clients, Open VPN's current user-level design is no

[Openvpn-devel] Re: [Openvpn-users] openvpn, smartcards and PKCS#11

2005-09-06 Thread James Yonan
On Tue, 6 Sep 2005, Alon Bar-Lev wrote: > Hello, > > I've seen some corresponding regarding this issue... But could > not understand the formal position of the development team. > > It seems that currently openvpn does not support smartcards. > > I've noticed that a patch is available from Frit

[Openvpn-devel] Re: Re[2]: The use of lzo if OpenSSL has zlib

2005-09-06 Thread Charles Duffy
Just because OpenSSL is linked with zlib doesn't mean it's going to actually use it for anything -- and to my knowledge, it doesn't.