Re: [Openvpn-devel] AW: Re: [Openvpn-devel] PKCS#11 and easy-rsa

2006-01-03 Thread Ondra Medek
Hi, > >> I've made easy-rsa 2.0 support for PKCS#11 (it makes a certificate from a > >> token). If you are interested, then it is at > >> > > In my view it lacks the following features: > > 1. Allow the user to specify his own PKCS#11 library. > > 2. Generate a new key. > > This is wide outside

Re: [Openvpn-devel] PKCS#11 and easy-rsa

2005-12-30 Thread Ondra Medek
Hi, > In my view it lacks the following features: > 1. Allow the user to specify his own PKCS#11 library. > 2. Generate a new key. > 3. Load the X.509 certificate into the token. > > Now when I think of it, issue#1 can be solved by a symbolic > link, you can have the configuration point to a lo

[Openvpn-devel] PKCS#11 and easy-rsa

2005-12-30 Thread Ondra Medek
Hi, I've made easy-rsa 2.0 support for PKCS#11 (it makes a certificate from a token). If you are interested, then it is at http://sourceforge.net/tracker/index.php?func=detail&aid=1357950&group_id=48978&atid=454721

[Openvpn-devel] Reading PIN for PKCS#11 from file

2005-12-29 Thread Ondra Medek
Hi, I like PKCS#11 support in new OpenVPN 2.1beta7. But I need to start client using eToken without user interaction, i.e. to read the user PIN from a file. A have already made a very simple hack to the pkcs11.c - the name of the file storing the PIN is hardcoded, see end of the post. I like to ha