Re: [openssl-dev] Using openssl with a remote private key

2015-03-23 Thread Tigran Gyonjyan (BLOOMBERG/ 731 LEX)
pology. There might be other solutions for this, still researching... From: openssl-dev@openssl.org At: Mar 17 2015 20:02:38 To: openssl-dev@openssl.org Subject: Re: [openssl-dev] Using openssl with a remote private key On 3/17/2015 10:44 AM, Tigran Gyonjyan (BLOOMBERG/ 731 LEX) wrote: > Hi th

Re: [openssl-dev] Using openssl with a remote private key

2015-03-17 Thread Douglas E Engert
On 3/17/2015 10:44 AM, Tigran Gyonjyan (BLOOMBERG/ 731 LEX) wrote: Hi there! Recently I had to work on an openssl project where due to security requirements I had to place the private key for the server certificate on another machine. In order to be able to make openssl ignore the fake priva

Re: [openssl-dev] Using openssl with a remote private key

2015-03-17 Thread David Woodhouse
On Tue, 2015-03-17 at 22:22 +, Tigran Gyonjyan (BLOOMBERG/ 731 LEX) wrote: > Thank you for your responses, PKCS#11 could be the right way to go. I > am hoping there is flexibility as per what functionality I want to > delegate (just need the decrypt piece). > If I had to implement a fully fledg

Re: [openssl-dev] Using openssl with a remote private key

2015-03-17 Thread Tigran Gyonjyan (BLOOMBERG/ 731 LEX)
m: dw...@infradead.org At: Mar 17 2015 16:02:44 To: Tigran Gyonjyan (BLOOMBERG/ 731 LEX), openssl-dev@openssl.org Subject: Re: [openssl-dev] Using openssl with a remote private key On Tue, 2015-03-17 at 15:44 +, Tigran Gyonjyan (BLOOMBERG/ 731 LEX) wrote: > > > Recently I had to work

Re: [openssl-dev] Using openssl with a remote private key

2015-03-17 Thread David Woodhouse
On Tue, 2015-03-17 at 15:44 +, Tigran Gyonjyan (BLOOMBERG/ 731 LEX) wrote: > > > Recently I had to work on an openssl project where due to security > requirements I had to place the private key for the server certificate > on another machine. In order to be able to make openssl ignore the > f

Re: [openssl-dev] Using openssl with a remote private key

2015-03-17 Thread Fedor Indutny
Hello Tigran! I was using: https://github.com/indutny/bud/compare/master...feature/async-key-ex For quite a long time now. It seems that you have your own solution, but anyway posted it here in case you are interested. Cheers! On Tue, Mar 17, 2015 at 8:44 AM, Tigran Gyonjyan (BLOOMBERG/ 731 LE

[openssl-dev] Using openssl with a remote private key

2015-03-17 Thread Tigran Gyonjyan (BLOOMBERG/ 731 LEX)
Hi there! Recently I had to work on an openssl project where due to security requirements I had to place the private key for the server certificate on another machine. In order to be able to make openssl ignore the fake private key in the certificate I had to "hack" some data structures to dele