From: "Christopher Crowley" <[EMAIL PROTECTED]>
ccrowley> <SNIP>
ccrowley> ...OpenSSL does not have a public interface that supports cryptocards.
ccrowley> iPlanet supports the PKCS#11 interface.
ccrowley> Although the Sun Crypto Accelerator card is compatible with OpenSSL, mod_ssl
ccrowley> rev 0.9.4, Sun does not support it. Customers who specialize in OpenSSL may
ccrowley> want to verse in configuring the documented patch provided in our home pages
ccrowley> and installing the card drivers to support it. But Enterprise Services will
ccrowley> not support the freeware products
ccrowley> </SNIP>
Since this is about OpenSSL 0.9.4, it's obvious that page isn't quite
up-to-date. Since 0.9.6, OpenSSL comes in an engine variant that
contains support for several hardware crypto devices, among others
Rainbow CryptoSwift (which I test a little now and then, since I have
one of those).
In other words, if you download openssl-engine-0.9.6c.tar.gz, you
should have support for your card in-the-box. It can be tested, for
example with the command 'openssl speed -engine cswift'. Please do
try it out, and come back if you get problems.
Also, we've extended the engine framework in the current development
(which will eventually become 0.9.7), among others supporting
dynamically loadable engines. When and if Sun discovers that, they
will be able to support OpenSSL much more easily (if they wish to do
so).
--
Richard Levitte \ Spannv�gen 38, II \ [EMAIL PROTECTED]
Redakteur@Stacken \ S-168 35 BROMMA \ T: +46-8-26 52 47
\ SWEDEN \ or +46-733-72 88 11
Procurator Odiosus Ex Infernis -- [EMAIL PROTECTED]
Member of the OpenSSL development team: http://www.openssl.org/
Software Engineer, GemPlus: http://www.gemplus.com/
Unsolicited commercial email is subject to an archival fee of $400.
See <http://www.stacken.kth.se/~levitte/mail/> for more info.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
