Alon Bar-Lev wrote: > On Thu, Mar 25, 2010 at 4:54 PM, Douglas E. Engert <deeng...@anl.gov> wrote: >> >> Alon Bar-Lev wrote: >>> 1. I did not find any way to sign binaries outside windows. >>> >>> 2. OpenVPN compilation is required as the OpenSSL is dynamically >>> loaded by both projects causing one to segfault if not compiled the >>> same. Hence, you cannot use OpenSC PKCS#11 with OpenVPN without this. >>> This is optional anyway, user can ignore the openvpn package anyway. >> So far no one has mentioned the use of manifests and side-by-side >> Assemblies: >> http://msdn.microsoft.com/en-us/library/aa376307(VS.85).aspx >> This should avoid this OpenSSL version issue. >> >> But to use this might require a true Windows build system. > > Good luck with OpenSSL developers :)
Yes, they have the same problem too. The point being is that Windows does offer solutions to some of these problems, and as we are trying to make open source packages from unix available on Windows we should be taking advantage of these features. The problem is especially problematic with packages like OpenSSL that has so many versions, and other packages distribute their own compiled/modified versions of OpenSSL. I realize that OpenSC does not a lot of Windows experts, what it does have is a lot of Unix experts that try and do everything from Unix. But we do have some windows expertise, as shown by the development of a CSP. As I have said before, if OpenSC wants the general Windows community to accept OpenSC as secure and stable, we need to solve many of these issues and building on Windows using Microsoft compilers and linkers is one step toward creating that trust. Fortunately for windows user, (but not for OpenSC developers) Windows smart card drivers are available from most vendors. Microsoft provides in Windows 7 a built in driver for the PIV card that I am most interested in. But there is still no PKCS#11 to CryptoAPI for use with Mozilla (I did see a thread from 2007 with Alon's response.) > > -- Douglas E. Engert <deeng...@anl.gov> Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 _______________________________________________ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel