Re: [Openvpn-devel] [PATCH 2/2] TLS v1.2 support for cryptoapicert -- RSA only

2018-01-17 Thread Selva Nair
Hi, Thanks for the comments On Wed, Jan 17, 2018 at 9:20 AM, Steffan Karger wrote: > Hi, > > Some preliminary comments: > > On 08-01-18 03:21, selva.n...@gmail.com wrote: >> From: Selva Nair >> >> - If an NCRYPT handle for the private key can be obtained, use >> NCryptSignHash from the Crypto

Re: [Openvpn-devel] [PATCH 2/2] TLS v1.2 support for cryptoapicert -- RSA only

2018-01-17 Thread Steffan Karger
Hi, Some preliminary comments: On 08-01-18 03:21, selva.n...@gmail.com wrote: > From: Selva Nair > > - If an NCRYPT handle for the private key can be obtained, use > NCryptSignHash from the Cryptography NG API to sign the hash. > > This should work for all keys in the Windows certifiate st

[Openvpn-devel] [PATCH 2/2] TLS v1.2 support for cryptoapicert -- RSA only

2018-01-07 Thread selva . nair
From: Selva Nair - If an NCRYPT handle for the private key can be obtained, use NCryptSignHash from the Cryptography NG API to sign the hash. This should work for all keys in the Windows certifiate stores but may fail for keys in a legacy token, for example. In such cases, we disable TLS