Thanks for the follow up Ben...I should probably have been more explicit with my use of the HSM acronym... Any idea who is leading the chrage on HSM support in OpenSSL? Regards, Trevor Dimond VP, Business Development Xetex, Inc. e-mail: [EMAIL PROTECTED] Phone: (415) 693-0225 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ben Laurie Sent: Tuesday, May 30, 2000 10:19 AM To: [EMAIL PROTECTED] Subject: Re: OpenSSL and HSM support Trevor Dimond wrote: > > OK..... > > a) this was not meant to be a trick question! OpenSSL has a CA function that > signs certificates and CRL's with a soft token typically held on the host > where OpenSSL is running. What I would like to do is to secure the token on > a Hardware Security Module (HSM) such that the signing key never leaves the > HSM and that the signing operation takes place on the HSM. Ideally, this > would be done by OpenSSL being configurable to point to an HSM for signing > purposes and then use the PKCS#11 CRYPTOKI API to initiate the signing > operation on the HSM. > > Am I missing something here or was it a trick answer!!!! Acronym overload ... HSM -> Hierarchical Storage Management! > > b) As far as the mailing list goes...given a) above I suspect I have it > right. > > Constructive answers always appreciated! Ah ... well there's work afoot to better support HSMs - but I'm not driving it! Cheers, Ben. -- http://www.apache-ssl.org/ben.html Coming to ApacheCon Europe 2000? http://apachecon.com/ ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
BEGIN:VCARD VERSION:2.1 N:Dimond;Trevor FN:Trevor Dimond ORG:Xetex Inc. TITLE:VP, Business Development TEL;WORK;VOICE:+1 (415) 693-0225 ADR;WORK;ENCODING=QUOTED-PRINTABLE:;;155 Jackson St.=0D=0ASuite 1308;San Francisco;CA;94111;United States of Am= erica LABEL;WORK;ENCODING=QUOTED-PRINTABLE:155 Jackson St.=0D=0ASuite 1308=0D=0ASan Francisco, CA 94111=0D=0AUnited Sta= tes of America URL: URL:http://www.xetex.com EMAIL;PREF;INTERNET:[EMAIL PROTECTED] REV:20000510T014448Z END:VCARD
