[openssl-users] pkcs11 engine client side authentication

Orc Erc 133mmx at gmail.com
Mon Dec 22 12:59:30 UTC 2014


Hi All,

I need to authenticate my client with a smartcard in ssl connection. So i
am using pkcs11 engine.

I have called the functions below, i have successfully read the certificate
from smart card. But while connecting to server client does not send any
certificate. It happens one side ssl connection, i need two side ssl
connection

I think, this happened because i didn't give the key id. Is there anyone
who knows assigning the key id?


set_pin("123456");
set_module("/usr/lib/libakisp11.so");

ENGINE_load_dynamic();
e = ENGINE_new();

result |= !bind_helper(e);
result |= !ENGINE_init(e);
result |= !ENGINE_register_complete(e);
result |= !ENGINE_set_default(e, ENGINE_METHOD_ALL);

//get certificate
ENGINE_ctrl(e, 205, 0, cert_params, NULL);

SSL_use_certificate(mConn->sslHandle, cert_params->cert);
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.opensslfoundation.net/pipermail/openssl-users/attachments/20141222/e9b8025d/attachment.html>


More information about the openssl-users mailing list