Re: [opensc-devel] Spec for specifying PKCS#11 modules to load

2010-07-17 Thread Anders Rundgren
I've personally always wondered why the PKCS #11 folks never considered a central registry like in Windows where cryptographic providers register themselves, particularly for user-oriented providers (not HSMs). I believe Microsoft introduced this 15 years ago... Note: I don't mean that a "kitchen

Re: [opensc-devel] Spec for specifying PKCS#11 modules to load

2010-07-17 Thread Peter Stuge
Stef Walter wrote: > Is there a spec around for specifying to applications which PKCS#11 > modules to load That's application specific. > and how to initialize them? This is covered by PKCS#11. A PKCS#11 module is basically a shared library that exposes the API described in the standard. Initia

[opensc-devel] Spec for specifying PKCS#11 modules to load

2010-07-17 Thread Stef Walter
Is there a spec around for specifying to applications which PKCS#11 modules to load and how to initialize them? I'm thinking something along the lines of PAM conf files, where you can specify which PAM modules different applications load. We're working hard on PKCS#11 support in GNOME, and rather