[Openvpn-devel] feature request: ability to pass pkcs#11 PIN via command line/config

2007-06-08 Thread Richard Hartmann
Hi all, I am setting up a test case where the user is supposed to plug in his USB token before booting. Once he boots up and prior to him logging in to Windows, I need to establish an OpenVPN connection to our aggregator. To do this, I am using a 'solution' where I abuse a netcat connection to

Re: [Openvpn-devel] feature request: ability to pass pkcs#11 PIN via command line/config

2007-06-08 Thread Richard Hartmann
Hi Alon, This is not wise in term of security. This depends on the use case and the requirements. If there was a way to have the user enter their PIN before logging into Windows, I would gladly use that. Furthermore, the method I described is still more secure than any solution based on certi

[Openvpn-devel] Release of 2.1?

2007-08-08 Thread Richard Hartmann
Hi all, do you know if there is any ETA for the release of 2.1? Also, will there be another RC or will RC4 be the last? Richard

[Openvpn-devel] [URGENT] State of CardOS 4.20 support in OpenSC?

2007-08-08 Thread Richard Hartmann
Hi all, first of all, sorry for [URGENT]'ing this mail, but at least to me, it is :/ I just tried to access our new eTokens with OpenSC's SCB on Windows XP. When dealing with an old version of the tokens, I get C:\Programme\Smart card bundle>opensc-tool.exe -n CardOS M4 while the new token

[Openvpn-devel] Sorry, post to wrong list (was: [URGENT] State of CardOS 4.20 support in OpenSC?)

2007-08-08 Thread Richard Hartmann
What comes from writing mail in a hurry? You send to the wrong list. My sincere apologies, Richard

[Openvpn-devel] Revisit of a possible compile-time enabled pkcs11-pin option

2007-09-10 Thread Richard Hartmann
Hi all, as most, if not all, of you will be aware, there is an option to pass the certificate passphrase into OpenVPN if you compile OpenVPN with the correct option, yourself. This Molly Guard enables people who know what they are doing to automate the process a little bit more than would be poss

Re: [Openvpn-devel] Revisit of a possible compile-time enabled pkcs11-pin option

2007-09-11 Thread Richard Hartmann
On 10/09/2007, Alon Bar-Lev wrote: > You can always provide your own management interface program that > supply static PIN. No need to change anything in OpenVPN. Yes, that is what I am doing at the moment. Still, I feel that it would be more reliable, less error prone and, yes, more secure to d