Re: [opensc-devel] Spec for specifying PKCS#11 modules to load

2010-07-18 Thread Stef Walter
On 2010-07-18 13:34, Anders Rundgren wrote: > On 2010-07-18 18:49, Stef Walter wrote: > >> >> The missing piece is a common standard for specifying which PKCS#11 >> modules for an application to load. > > This is not what Microsoft and Apple offers. > > They offer a directory of providers. If a

Re: [opensc-devel] Spec for specifying PKCS#11 modules to load

2010-07-18 Thread Anders Rundgren
On 2010-07-18 18:49, Stef Walter wrote: > > The missing piece is a common standard for specifying which PKCS#11 > modules for an application to load. This is not what Microsoft and Apple offers. They offer a directory of providers. If apps want to discriminate against certain providers they can

Re: [opensc-devel] Spec for specifying PKCS#11 modules to load

2010-07-18 Thread Jean-Michel Pouré - GOOZE
On Sun, 2010-07-18 at 08:46 -0500, Stef Walter wrote: > Well in GNOME we're implementing a foundation for usable crypto based > around PKCS#11. From a user point issue, it seems that Gnome Keyring manages different types of keyrings: password, OpenPGP and OpenSSH. It has also limited suport for P

Re: [opensc-devel] Spec for specifying PKCS#11 modules to load

2010-07-18 Thread Stef Walter
On 2010-07-18 10:27, Andreas Jellinghaus wrote: > Am Sonntag 18 Juli 2010, um 00:16:15 schrieb Stef Walter: >> Is there a spec around for specifying to applications which PKCS#11 >> modules to load and how to initialize them? >> >> I'm thinking something along the lines of PAM conf files, where you

Re: [opensc-devel] Spec for specifying PKCS#11 modules to load

2010-07-18 Thread Andreas Jellinghaus
Am Sonntag 18 Juli 2010, um 00:16:15 schrieb Stef Walter: > Is there a spec around for specifying to applications which PKCS#11 > modules to load and how to initialize them? > > I'm thinking something along the lines of PAM conf files, where you can > specify which PAM modules different applicatio

Re: [opensc-devel] Spec for specifying PKCS#11 modules to load

2010-07-18 Thread Anders Rundgren
On 2010-07-18 15:46, Stef Walter wrote: > I'm thinking of using PAM for ideas. If you're familiar with PAM the > following will make sense: > > * Directory of configuration files one per application. > * Each file specifies modules to load. > * Default configuration file when an application do

Re: [opensc-devel] Spec for specifying PKCS#11 modules to load

2010-07-18 Thread Stef Walter
On 2010-07-18 01:33, Anders Rundgren wrote: > BTW, isn't there > an effort establishing NSS as the Linux crypto platform? Well in GNOME we're implementing a foundation for usable crypto based around PKCS#11. We're 'equal opportunity' for crypto libraries. Although NSS is a big player, and have put

Re: [opensc-devel] Spec for specifying PKCS#11 modules to load

2010-07-18 Thread Stef Walter
On 2010-07-17 18:10, Peter Stuge wrote: > Stef Walter wrote: >> Is there a spec around for specifying to applications which PKCS#11 >> modules to load > > That's application specific. > >> I'm thinking something along the lines of PAM conf files, where you >> can specify which PAM modules differe