Hi, last time I talked about the STORE effort, it was about search for specific data. I believe that this PR covers quite a lot of what is desired, and is designed to be easily extensible:
https://github.com/openssl/openssl/pull/2688 (it's built on top of PRs #2011 and #1961, making it look quite huge). As a proof of concept, I had a closer look at X509_LOOKUP_METHODs and came up with two integrations with STORE, one being light weight (or cowardly), the other being a bit more radical. lightweight: https://github.com/openssl/openssl/pull/2696 radical: https://github.com/openssl/openssl/pull/2697 These two PRs have not been built on top of the URI and STORE PRs, for demonstration purposes. To make them work, they need to be merged on top of PR #2688. Note: they currently only take straight file / directory specs, no URIs. The change to full blown URI processing isn't very hard but needs a bit more testing. At this point, it's high time for comments in the PRs, and reviews (especially by team members)... so far, there's been very little of that. Also, it's high time to start playing with engines and see how integration with the STORE API works out. The TPM engine would be interesting, and so would the PKCS#11 one. Also, if there's an LDAP engine to adapt, that would be an interesting project as well. Cheers, Richard -- Richard Levitte levi...@openssl.org OpenSSL Project http://www.openssl.org/~levitte/ -- openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev