Re: [Openvpn-devel] AW: Re: [Openvpn-devel] PKCS#11 and easy-rsa

2006-01-03 Thread Alon Bar-Lev
Götz Babin-Ebell wrote: In my view it lacks the following features: 1. Allow the user to specify his own PKCS#11 library. 2. Generate a new key. This is wide outside of the OpenVPN usage. Is is to be implemented in an PKCS#11 (key) managemement tool but NOT in an VPN daemon. The update is for

Re: [Openvpn-devel] AW: Re: [Openvpn-devel] PKCS#11 and easy-rsa

2006-01-03 Thread Ondra Medek
Hi, > >> I've made easy-rsa 2.0 support for PKCS#11 (it makes a certificate from a > >> token). If you are interested, then it is at > >> > > In my view it lacks the following features: > > 1. Allow the user to specify his own PKCS#11 library. > > 2. Generate a new key. > > This is wide outside

[Openvpn-devel] AW: Re: [Openvpn-devel] PKCS#11 and easy-rsa

2006-01-03 Thread Götz Babin-Ebell
> Ondra Medek wrote: >> Hi, >> >> I've made easy-rsa 2.0 support for PKCS#11 (it makes a certificate from a >> token). If you are interested, then it is at >> > > Hello, > > Thank you for your patch. > > In my view it lacks the following features: > 1. Allow the user to specify his own PKCS#11

Re: [Openvpn-devel] PKCS#11 and easy-rsa

2005-12-30 Thread Ondra Medek
Hi, > In my view it lacks the following features: > 1. Allow the user to specify his own PKCS#11 library. > 2. Generate a new key. > 3. Load the X.509 certificate into the token. > > Now when I think of it, issue#1 can be solved by a symbolic > link, you can have the configuration point to a lo

Re: [Openvpn-devel] PKCS#11 and easy-rsa

2005-12-30 Thread Alon Bar-Lev
Ondra Medek wrote: Hi, I've made easy-rsa 2.0 support for PKCS#11 (it makes a certificate from a token). If you are interested, then it is at Hello, Thank you for your patch. In my view it lacks the following features: 1. Allow the user to specify his own PKCS#11 library. 2. Generate a new