Alon Bar-Lev wrote:
> On Thu, Mar 25, 2010 at 4:54 PM, Douglas E. Engert <deeng...@anl.gov> wrote:
>>
>> Alon Bar-Lev wrote:
>>> 1. I did not find any way to sign binaries outside windows.
>>>
>>> 2. OpenVPN compilation is required as the OpenSSL is dynamically
>>> loaded by both projects causing one to segfault if not compiled the
>>> same. Hence, you cannot use OpenSC PKCS#11 with OpenVPN without this.
>>> This is optional anyway, user can ignore the openvpn package anyway.
>> So far no one has mentioned the use of manifests and side-by-side
>> Assemblies:
>> http://msdn.microsoft.com/en-us/library/aa376307(VS.85).aspx
>> This should avoid this OpenSSL version issue.
>>
>> But to use this might require a true Windows build system.
> 
> Good luck with OpenSSL developers :)

Yes, they have the same problem too. The point being is that Windows does
offer solutions to some of these problems, and as we are trying to make
open source packages from unix available on Windows we should be taking
advantage of these features.

The problem is especially problematic with packages like OpenSSL that has
so many versions, and other packages distribute their own compiled/modified
versions of OpenSSL.

I realize that OpenSC does not a lot of Windows experts, what it does have
is a lot of Unix experts that try and do everything from Unix. But we do
have some windows expertise, as shown by the development of a CSP.

As I have said before, if OpenSC wants the general Windows community to
accept OpenSC as secure and stable, we need to solve many of these issues
and building on Windows using Microsoft compilers and linkers is one step
toward creating that trust.

Fortunately for windows user, (but not for OpenSC developers) Windows smart
card drivers are available from most vendors. Microsoft provides in Windows
7 a built in driver for the PIV card that I am most interested in.
But there is still no PKCS#11 to CryptoAPI for use with Mozilla (I did see a
thread from 2007 with Alon's response.)


> 
> 

-- 

  Douglas E. Engert  <deeng...@anl.gov>
  Argonne National Laboratory
  9700 South Cass Avenue
  Argonne, Illinois  60439
  (630) 252-5444
_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to