[opensc-devel] Apache2 mod_ssl with smart cards

2010-03-30 Thread Jean-Michel Pouré - GOOZE
Hello, I would like to write a tutorial explaining how to configure Apache2 and mod_ssl to use smartcards. My only question is: in a production environment, there is several SSL connections at once. Can OpenSC handle high load? Or is OpenSC + mod_ssl only for small and very secure operations?

Re: [opensc-devel] OpenSC experimental installer ?

2010-03-30 Thread Alon Bar-Lev
You can build one at [1]. http://opensc-project.org/build If you do not wish to compile, I can upload a build for you to test, send me a URL. Alon. 2010/3/30 Jean-Michel Pouré - GOOZE jmpo...@gooze.eu: Dear friends, I know this was discussed on the ML, but I could not follow discussions.

Re: [opensc-devel] Apache2 mod_ssl with smart cards

2010-03-30 Thread Alon Bar-Lev
Smartcards are usually exists at client side, so it has nothing to do with mod_ssl. All your questions are related to browsers. 2010/3/30 Jean-Michel Pouré - GOOZE jmpo...@gooze.eu: Hello, I would like to write a tutorial explaining how to configure Apache2 and mod_ssl to use smartcards. My

Re: [opensc-devel] OpenSC experimental installer ?

2010-03-30 Thread Martin Paljak
On Mar 30, 2010, at 15:22 , Alon Bar-Lev wrote: You can build one at [1]. http://opensc-project.org/build And the InnoSetup one linked from http://www.opensc-project.org/opensc/wiki/WindowsInstaller Alon, if you build a new one and upload it, please add a link to that page as well. --

Re: [opensc-devel] OpenSC experimental installer ?

2010-03-30 Thread Jean-Michel Pouré - GOOZE
On Tue, 2010-03-30 at 15:34 +0300, Martin Paljak wrote: And the InnoSetup one linked from http://www.opensc-project.org/opensc/wiki/WindowsInstaller Alon, if you build a new one and upload it, please add a link to that page as well. I would be delighted to test this installer under

Re: [opensc-devel] Active developers on opensc-project.org

2010-03-30 Thread Andreas Jellinghaus
Am Montag 29 März 2010 16:28:05 schrieb Douglas E. Engert: There are also developers who don't commit directly. I am one of them who has submitted many changes and maintains the PIV card driver. But I send in changes and Andreas is the one who usually commits them for me. I suspect that

Re: [opensc-devel] Active developers on opensc-project.org

2010-03-30 Thread Chaskiel Grundman
I'd already asked to have my commit access revoked, so this change is fine with me. ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel

Re: [opensc-devel] Active developers on opensc-project.org

2010-03-30 Thread Martin Paljak
Hello, On Mar 30, 2010, at 21:14 , Andreas Jellinghaus wrote: disabling access to passive developers is a good thing, as long time unused and unmaintained accounts are a typical security problem. This more of a cleanup and documentation process than a security process, which is a by-product.

Re: [opensc-devel] Active developers on opensc-project.org

2010-03-30 Thread Andreas Jellinghaus
Am Dienstag 30 März 2010 20:59:58 schrieb Martin Paljak: * at least pkcs11-tool --test --login for already initialized cards. again some failures are ok (e.g. opensc trying some mechanisms on very restricted keys - for example signature cards restricted to few signing mechanisms, while

Re: [opensc-devel] OpenSC experimental installer ?

2010-03-30 Thread Alon Bar-Lev
On Tue, Mar 30, 2010 at 3:34 PM, Martin Paljak mar...@paljak.pri.ee wrote: On Mar 30, 2010, at 15:22 , Alon Bar-Lev wrote: You can build one at [1]. http://opensc-project.org/build And the InnoSetup one linked from http://www.opensc-project.org/opensc/wiki/WindowsInstaller Alon, if you

Re: [opensc-devel] OpenSC experimental installer ?

2010-03-30 Thread Martin Paljak
On Mar 30, 2010, at 23:36 , Alon Bar-Lev wrote: On Tue, Mar 30, 2010 at 3:34 PM, Martin Paljak mar...@paljak.pri.ee wrote: On Mar 30, 2010, at 15:22 , Alon Bar-Lev wrote: You can build one at [1]. http://opensc-project.org/build And the InnoSetup one linked from

Re: [opensc-devel] OpenSC experimental installer ?

2010-03-30 Thread Alon Bar-Lev
On Tue, Mar 30, 2010 at 11:44 PM, Martin Paljak mar...@paljak.pri.ee wrote: The svn for binary file distribution is bad, as you cannot really delete from there... So as I don't even know if the setup is working, I prefer to send it directly to testers for now. A simple sshfs fileserver could