[Openvpn-devel] openvpn - support PKCS#11 smartcards

[Alon Bar-Lev <alon.barlev@xxxxxxxxx>]

Hello,

C. Ruiz, Ivan wrote:
>  
>  I only changed C_SignRecover to C_Sign and C_SignRecoverInit to C_SignInit (pkcs11.c) and
> it worked for me with OpenSC. Can you test if it's OK for you with this minor change?

Hmmm... It should be SignRecover... strange they don't support 
it... Anyway, please check the new patch... I've added a new 
argument:

--pkcs11-sign-mode mode
	auto (default) - try to find out which to use.
	recover - use sign recover.
	sign - use sign.

Please tell me if the default works.

>  
>  Apart from this i've tested that I can specify certs both by label and by id <- OK!

I am very glad!!!

>  
>  Not been able to test under Windows as I don't have the compiler for this platform.
>  

I hope someone will check it out...

So... Can we drop the request for OpenSC support and focus on 
PKCS#11?

Best Regards,
Alon Bar-Lev.

Attachment: openvpn-2.0.2-pkcs11-20050912.patch.bz2
Description: Binary data