Resources, Links
RSA Labs defined the Public Key Cryptography Standards (PKCS).
PKCS#11 defines an API to use software modules
that give access to cryptographic token hardware.
We think PKCS#11 is not easy to use, libp11 has the goal to make it easier.
Libp11 is tested with OpenSC, but should work fine
with other implementations of PKCS#11, too.
Software using libp11:
- Pam_p11 is a simple pam module that allows login via smart card.
To use pam_p11 you need to store the certificates allowed for login in a file, either in pem format
or the public keys in ssh format in your .ssh/authorized_keys file. Pam_p11 is very simple, it has
no config file, no options, does not know about certificate chains, certificate authorities, revocation
lists or OCSP. Perfect for the small installation with no frills.
- Engine_pkcs11 is an Engine for OpenSSL, a loadable module that
allows you to use openssl, but redirect crypto operations to your smart card hardware.