On 11/11/2012 03:24 AM, Anthony Foiani wrote: > Greetings. > > I'm working with a CardContact HSM, and would like to generate a > keypair on the token, then get a certificate based on that key.
Hello, Your question was on openssl, but just in case someone is interested. If you have any recent version of gnutls you could simply do that by using the PKCS #11 URLs of the objects. That is: certtool --generate-request --outfile req.pem --load-privkey "pkcs11:yyy" --load-pubkey "pkcs11:xxx" should generate a request from the objects based on a smart card. The pkcs11: URLs are obtained using the "p11tool --list-all --login" command. regards, Nikos _______________________________________________ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel
