Patch attached.

Add support for SSL engine loading the private key.

Added option 'key-engine' specifying the name of the engine that
will load the private key.

For example this can be "tpm" to use the OpenSSL TPM engine module
(libengine-tpm-openssl in Debian).

It defaults to the built-in UI methods because openssl-tpm-engine
doesn't yet support user data being sent to the callback functions.
A patch for that on its way to them.

Some more details:
http://blog.habets.pp.se/2012/02/TPM-backed-SSL

Signed-off-by: Thomas Habets <hab...@google.com>

-- 
typedef struct me_s {
 char name[]      = { "Thomas Habets" };
 char email[]     = { "tho...@habets.pp.se" };
 char kernel[]    = { "Linux" };
 char *pgpKey[]   = { "http://www.habets.pp.se/pubkey.txt"; };
 char pgp[] = { "A8A3 D1DD 4AE0 8467 7FDE  0945 286A E90A AD48 E854" };
 char coolcmd[]   = { "echo '. ./_&. ./_'>_;. ./_" };
} me_t;

Attachment: 0001-Add-support-for-SSL-engine-loading-the-private-key.patch
Description: Binary data

Reply via email to