[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] Get cert from a smartcard (was: Release: OpenVPN GUI for Windows v1.0-beta1)


  • Subject: Re: [Openvpn-users] Get cert from a smartcard (was: Release: OpenVPN GUI for Windows v1.0-beta1)
  • From: Torge Szczepanek <openvpn-users@xxxxxxxxxxxxx>
  • Date: Sun, 4 Jul 2004 10:07:22 +0200

On Saturday 03 July 2004 10:09, Mathias Sundman wrote:

> I think that would be great too. However, I've never worked with such a
> device...

I also didn't get any hands on that kind of device until now, but I might get 
this in the future.

> How do they work? Is there a standard API to access them, or does every
> manufacurer have their own API?

I think this really depends on the vendor and which standard he uses. There 
are some differents standards

Some code was already written for this:

http://www.opensc.org/
http://home.kcore.de/~kianga/smartcard/

> Can you simply read the cert/key out of the smartcard or is there some
> "challange-respone" function involved?

There are some device, where you have to enter a pin code on the 
smartcardreader itself. This depends on the hardware.

There are also some special devices available like the Aladdin e-token.

> I do think this type of support should be in the core of openvpn, not in
> the gui though.

I will do some research on this and try to find out which devices can be used 
and how this all might work together with OpenVPN.

For using in a corporate enviroments OpenVPN should have Strong authentication 
with smartcards or this e-token stuff.

____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users