Re: [opensc-devel] PKCS#11 for CryptoAPI

2007-05-06 Thread Nate Nielsen
Andreas Jellinghaus wrote: > sure, it is very welcome. well, it is the third project next to pkcscsp and > csp11, but both of that are dead and no longer under development. Well CSP#11, as I understand it, does the exact opposite. It presents a Windows Cryptographic Service Provider interface whi

Re: [opensc-devel] PKCS#11 for CryptoAPI

2007-05-06 Thread Nate Nielsen
Alon Bar-Lev wrote: > I will review this in week-end, but just a general comment... The RSA > Security include files come with L/GPL incompatible license. > There is a free alternative that we use, please test it out, so we > don't have licensing issues. > > The file is maintained at: > http://cvs

[opensc-devel] wiki working again?

2007-05-06 Thread Andreas Jellinghaus
Hi, trac gave me a lot of headaches - part of the debian sarge -> etch update was also a trac update to 0.10.*. Initially I forgot to update the plugins, now I did that, but they don't work as expected (or have strange "featured" - e.g. only some files within the *.egg are found if the plugin is

Re: [opensc-devel] PKCS#11 for CryptoAPI

2007-05-06 Thread Andreas Jellinghaus
On Sunday 06 May 2007 21:01:55 Alon Bar-Lev wrote: > > >>> BTW, I'm working on building a complete PKCS#11 provider for CAPI. So > > >>> by supporting PKCS#11 you'd be able to have things like CAPI support. > > >> > > >> This is great to hear! > > >> It has been long since I developed for Microsoft

[opensc-devel] PKCS#11 for CryptoAPI

2007-05-06 Thread Alon Bar-Lev
On 5/6/07, Nate Nielsen <[EMAIL PROTECTED]> wrote: > > Alon Bar-Lev wrote: > >> On 4/24/07, Nate Nielsen <[EMAIL PROTECTED]> wrote: > >>> BTW, I'm working on building a complete PKCS#11 provider for CAPI. So by > >>> supporting PKCS#11 you'd be able to have things like CAPI support. > >> This is gr

Re: [opensc-devel] A 'real' web server certificate for opensc-project.org from godaddy

2007-05-06 Thread Eddy Nigg (StartCom Ltd.)
Hi Nils, I don't want to drag this discussion too far with my answer here, but please note, that a self-signed certificate is absolutely worthless, except in case: 1.) You created it. 2.) Wrote down it's fingerprint. 3.) Everybody relying on it, received the fingerprint by other (and secure

Re: [opensc-devel] A 'real' web server certificate for opensc-project.org from godaddy

2007-05-06 Thread Nils Larsch
Andreas Jellinghaus wrote: ... > the more important questions is: but why do we need an official ssl > certificate at all? there is no user information on opensc-project.org, > all we use ssl for is the developer write access to the svn repository > (and the login with trac and awstats and munin -