Re: HSM driver for REST API

Frank Morgner <[email protected]>
Newsgroups gmane.comp.encryption.opensc.devel
Message-ID <CAO8bUymLp_Gcz419DQHNC4mb7q-vJgZOve=MtTohOtj-ozf0zg@mail.gmail.com>
I don't know exactly what the benefit of a HSM with REST API is, but
regarding
the integration in OpenSC you have several options:

- Write a PC/SC driver that makes your HSM accessible for OpenSC (and most
  other smartcard applications). You could use this virtual driver
http://frankmorgner.github.io/vsmartcard/virtualsmartcard/README.html as
starting point.

- Write new reader driver within OpenSC (which naturally doesn't integrate
with
  other applications). You need to add a new implementation of
`sc_reader_t`,
look into reader-pcsc.c for guidance.

- Write a CT-API shared library, which OpenSC and some other smartcard
  applications can use.

And of course, you could write a completely new implementation of a PKCS#11
library and skip integration with OpenSC. Given your use case, this option
looks
like the most favourable one.

2016-12-25 22:05 GMT+01:00 Sven Anderson <[email protected]>:

> Hi everyone!
>
> I wanna write a PKCS#11 for a network attached HSM that is accessed via a
> REST API. I would write the "backend" to the HSM with C++/boost/cpprestsdk.
> I'm thinking about which PKCS#11 project would be the best to base that
> work on. OpenSC seems to be purely focused on hardware-attached devices. so
> would it be a reasonable thing to use OpenSC for that? And how would I
> "hook in" such a non-USB attached device?
>
> Thanks in advance,
>
> Sven
>
> [sent from mobile device]
>
> ------------------------------------------------------------
> ------------------
> Developer Access Program for Intel Xeon Phi Processors
> Access to Intel Xeon Phi processor-based developer platforms.
> With one year of Intel Parallel Studio XE.
> Training and support from Colfax.
> Order your platform today.http://sdm.link/intel
> _______________________________________________
> Opensc-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/opensc-devel
>

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most 
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

_______________________________________________
Opensc-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/opensc-devel
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.