On Jun 6, 2011, at 15:01 , Viktor Tarasov wrote:

> Le 06/06/2011 11:22, Martin Paljak a écrit :
>> Hello,
>> 
>> 
>> Just a quick notice that a section about "certificate compatibility"
>> seems justified somewhere in documentation.
> 
> Yes, it would be very useful.
> I imagine that subtle expert knowledge of the subject is needed, for example 
> when it's going about BaseCSP, minidriver, SmartcardLogon, ...
Maybe we can re-use the knowledge of EJBCA folks here, maybe their 
documentation even already includes necessary bits and pieces of information, I 
have not checked. Also PKIX docs are useful, but to get certificates "right" 
requires some time and effort. That's why setting up a really CA is not the 
same as running some OpenSSL commands... Root key secrecy, policies, 
certificate profiles etc require a lot of work to get right for a setup.


Cheers,
Martin
-- 
@MartinPaljak.net
+3725156495

_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to