OK..... a) this was not meant to be a trick question! OpenSSL has a CA function that signs certificates and CRL's with a soft token typically held on the host where OpenSSL is running. What I would like to do is to secure the token on a Hardware Security Module (HSM) such that the signing key never leaves the HSM and that the signing operation takes place on the HSM. Ideally, this would be done by OpenSSL being configurable to point to an HSM for signing purposes and then use the PKCS#11 CRYPTOKI API to initiate the signing operation on the HSM. Am I missing something here or was it a trick answer!!!! b) As far as the mailing list goes...given a) above I suspect I have it right. Constructive answers always appreciated! Regards, Trevor Dimond VP, Business Development Xetex, Inc. e-mail: [EMAIL PROTECTED] Phone: (415) 693-0225 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ben Laurie Sent: Friday, May 26, 2000 3:36 PM To: [EMAIL PROTECTED] Subject: Re: OpenSSL and HSM support This is: a) obviously a trick question: what does HSM have to do with CAs? b) on the wrong list - try ssl-users. Cheers, Ben. Trevor Dimond wrote: > > Anyone know of any HSM that supports OpenSSL CA functions for signing > certificates and CRL's? > > If not, anyone aware of any work in progress and the HSM vendor(s) involved? > > Thanks. > > Regards, > > Trevor Dimond > VP, Business Development > Xetex, Inc. > e-mail: [EMAIL PROTECTED] > Phone: (415) 693-0225 -- http://www.apache-ssl.org/ben.html Coming to ApacheCon Europe 2000? http://apachecon.com/ ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
BEGIN:VCARD VERSION:2.1 N:Dimond;Trevor FN:Trevor Dimond ORG:Xetex Inc. TITLE:VP, Business Development TEL;WORK;VOICE:+1 (415) 693-0225 ADR;WORK;ENCODING=QUOTED-PRINTABLE:;;155 Jackson St.=0D=0ASuite 1308;San Francisco;CA;94111;United States of Am= erica LABEL;WORK;ENCODING=QUOTED-PRINTABLE:155 Jackson St.=0D=0ASuite 1308=0D=0ASan Francisco, CA 94111=0D=0AUnited Sta= tes of America URL: URL:http://www.xetex.com EMAIL;PREF;INTERNET:[EMAIL PROTECTED] REV:20000510T014448Z END:VCARD
