Re: [twsocket] Using a SmartCard with ICS-SSL (was SSL PEM error)

2009-04-24 Thread Dod
Hello, But I forgot to answer your question : I own a SmartCard reader and a valid SmartCard for testing. Strong authentication using Key engine of a smartcard using ICS-SSL (OpenSSL and PKCS11 engine) would be an interesting extended fature for highly secured client/server apps. regards.

Re: [twsocket] Using a SmartCard with ICS-SSL (was SSL PEM error)

2009-04-24 Thread Arno Garrels
Fastream Technologies wrote: > Ok, I see my name was passed by Arno in the thread, is this work > extendable to OpenSSL acceleration? Arno, was this the reason you > said "Fastream was interested as well..."? Please read message "*Experimental* ..." -- Arno Garrels > > Regards, > > SZ > > On

Re: [twsocket] Using a SmartCard with ICS-SSL (was SSL PEM error)

2009-04-24 Thread Fastream Technologies
Ok, I see my name was passed by Arno in the thread, is this work extendable to OpenSSL acceleration? Arno, was this the reason you said "Fastream was interested as well..."? Regards, SZ On 4/24/09, Dod wrote: > > Hello, > > The goal is to try to do SSL secured by French Doctor's HealthCare > Sm

Re: [twsocket] Using a SmartCard with ICS-SSL (was SSL PEM error)

2009-04-24 Thread Dod
Hello, The goal is to try to do SSL secured by French Doctor's HealthCare SmartCard. Some medical HTTPS, POP-SSL, SSL-SMTP servers require the SmartCard and check if certificate is valid. For example, FireFix using the PKCS11 module can do the HTTPS connection. I also Know s local POP-SSL pr

Re: [twsocket] Using a SmartCard with ICS-SSL (was SSL PEM error)

2009-04-24 Thread Fastream Technologies
Hello, Does this work has anything to do with OpenSSL hardware accelerators support? If so, is it tested by somebody who actually has a card? Best Regards, SZ On 4/23/09, Arno Garrels wrote: > > Dod wrote: > > Hello Arno, > > > > After searching for PKCS11 infos I found a nice Delphi PKCS11 e

Re: [twsocket] Using a SmartCard with ICS-SSL (was SSL PEM error)

2009-04-23 Thread Arno Garrels
Dod wrote: > Hello Arno, > > After searching for PKCS11 infos I found a nice Delphi PKCS11 explorer > provided with sources, it do not rely on openSSL may be it can help ? But we use OpenSSL so that's important. I just sent you a first binary test by PM, please try. -- Arno Garrels > > look a

Re: [twsocket] Using a SmartCard with ICS-SSL (was SSL PEM error)

2009-04-23 Thread Dod
Hello Arno, After searching for PKCS11 infos I found a nice Delphi PKCS11 explorer provided with sources, it do not rely on openSSL may be it can help ? look at sdean12.org regards. >> Here are the OpenSSL commands : AG> Thanks. AG> I tried to implement dynamic Engines however it seems gettin

Re: [twsocket] Using a SmartCard with ICS-SSL (was SSL PEM error)

2009-04-22 Thread Arno Garrels
Dod wrote: > Here are the OpenSSL commands : Thanks. I tried to implement dynamic Engines however it seems getting the PIN code from a simple callback is the big problem when implementing dynamic engines with key capabilities. I thought it was easier until I realized that the OpenSSL guys intro

Re: [twsocket] Using a SmartCard with ICS-SSL (was SSL PEM error)

2009-04-22 Thread Dod
Hello Arno, I am using Delphi 7 / ICS 6 The SmartCard I am working on is the French Doctor's HealthCare professionnal card. I had to manually extract the Authentication certificate using some .cert export tool because for unknown reason OpenSSL can't access it directly, so once ext

Re: [twsocket] Using a SmartCard with ICS-SSL (was SSL PEM error)

2009-04-21 Thread Arno Garrels
Hi Dod, > As I told you I am still learning about thoses Smartcards but it seems > that the SmartCards has some functions you can call, I tested one > called "random number generator", but it also can make authentication > key calculation and I suppose this is why the private key cannot n