Re: engine format keys

Hi Kent,

On September 29, 2005 12:28 pm, Kent Yoder wrote:
>   I've been looking into enabling apache+mod_ssl to use hardware keys
> encrypted by a TPM.  I have openssl's s_server test working using an
> openssl TPM engine [1] and trousers [2].  It looks like the key to
> getting this working in apache is support for engine format keys in
> mod_ssl.  Is there any interest in enabling engine format keys in
> mod_ssl, or, is there another path to accomplish what I'm trying to
> do?

Sorry I didn't notice this earlier. I added some hooks to modssl ages ago 
to support engine ctrl-commands if that helps. In fact you may have to 
jiggle with this patch if you want to update it to the latest mod_ssl 
version, but it may be easier than redoing it from scratch;

   http://www.geoffthorpe.net/crypto/

If you get it running with a more recent version and feel like giving me a 
newer diff, I'd appreciate being able to replace the one on my site. I 
don't think Ralf wants to include this functionality now that mod_ssl is 
just in maintenance-mode and (kinda) deprecated in favour of apache2.

Cheers,
Geoff

-- 
Geoff Thorpe
[email protected]
http://www.geoffthorpe.net/

Même ceux qui se sentent pas des nôtres, ne nous voyant plus à genoux,
seront, plus que jamais, chez eux chez nous.
  -- Loco Locass
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [email protected]
Automated List Manager                            [email protected]