Re: [Openvpn-devel] patch pkcs11 dynamic key id detection

2008-03-17 Thread Alon Bar-Lev
Hello, In your case I thought using a simple perl script installed using servany, this script can provide the certificate and passphrase automation during computer startup. A sample perl scripts are available at [1]. Anyway... The proper solution for Windows login is to write a RAS provider that

Re: [Openvpn-devel] patch pkcs11 dynamic key id detection

2008-03-17 Thread Alon Bar-Lev
On 3/17/08, Christophe Vandeplas wrote: > I'll have a deeper look at your management patch, maybe I can find a > way to add the pkcs11-match principle in your code with almost no > extra complexity and redundant code. > Do you think it's worth the effort? Or better wait for the results and >

Re: [Openvpn-devel] patch pkcs11 dynamic key id detection

2008-03-17 Thread Christophe Vandeplas
On 3/17/08, Alon Bar-Lev wrote: > On 3/17/08, Christophe Vandeplas wrote: > > > So back to my original idea... Use the management interface to prompt > > > the user to select a certificate. > > > > > > What does that mean for the end-user? If I understand it correctly the > > user will

Re: [Openvpn-devel] patch pkcs11 dynamic key id detection

2008-03-17 Thread Alon Bar-Lev
On 3/17/08, Christophe Vandeplas wrote: > > So back to my original idea... Use the management interface to prompt > > the user to select a certificate. > > > What does that mean for the end-user? If I understand it correctly the > user will need to do the following: > - start tunnel/openvpn >

Re: [Openvpn-devel] patch pkcs11 dynamic key id detection

2008-03-17 Thread Christophe Vandeplas
> So back to my original idea... Use the management interface to prompt > the user to select a certificate. What does that mean for the end-user? If I understand it correctly the user will need to do the following: - start tunnel/openvpn - open webbrowser and select certificate - enter key (wher