Bryce

Why not make the MS CAPI engine available for download.  We are interested and I 
suspect quite a few others would have an interest also.  I suspect a lot of people are 
interested but don't want to admit they use Microsoft.  You know, only the big boys 
use 
OpenSSL on UNIX.  However, the truth is, over 80% of all OpenSSL usage is on 
Microsoft Windows!

Ken


> 
> In summary the MS CAPI engine provides:
> - Support for RSA signing and verification operations that will work w/
> non-exportable MS CAPI private keys, should work with any CAPI-compliant HW
> token (testing it w/ Rainbow iKey's this week)
> - Full access to any MS CAPI keystore, implemented a certificate lookup library
> that implements the X509_LOOKUP_METHOD "interface" (thus when verifying the
> certificate chain the MS CAPI "Root" and "CA" keystores can be used)
> - Engine interface to MS CAPI random number generator
> - SSL interface to allow visual selection of client certificate during
> negotiation phase (IE/Mozilla style, using an SSL (undocumented?) hook)
> 
> --- Fr�d�ric_Giudicelli <[EMAIL PROTECTED]> wrote:
> > I already did this announce, but nobody seemed to care at the time :)
> > 
> > I developed some BIO support for the MS SSPI, allowing to initiate from
> > openssl some SSL connection using a MS PCERT_CONTEXT, I would gladely
> > provide it to the OpenSSL project.
> > 
> > Does your engine provide access to the certificate, or just the RSA bi-key ?
> > 
> > 
> > Fr�d�ric Giudicelli
> > http://www.newpki.org
> > 
> > 
> > 
> > ______________________________________________________________________
> > OpenSSL Project                                 http://www.openssl.org
> > Development Mailing List                       [EMAIL PROTECTED]
> > Automated List Manager                           [EMAIL PROTECTED]
> 
> 
> __________________________________
> Do you Yahoo!?
> Yahoo! Calendar - Free online calendar with sync to Outlook(TM).
> http://calendar.yahoo.com
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> Development Mailing List                       [EMAIL PROTECTED]
> Automated List Manager                           [EMAIL PROTECTED]

__________________________________________________
Support
InterSoft International, Inc.
Voice: 888-823-1541, International 281-398-7060
Fax: 888-823-1542, International 281-398-0221
[EMAIL PROTECTED]
http://www.securenetterm.com

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to