[openssl-users] openssl-1.1.0b : Getting keys from TPM

[Zvi Vered]

Hi Ken,

1. I mean: read from TPM

2. In order to create an SSL session with the server, should I need also
the private key ?

3. I want to use TPM 2.0

Thank you for your help,
Z.V

On Thu, Nov 3, 2016 at 5:21 PM, Ken Goldman <kgoldman at us.ibm.com> wrote:

> A few comments:
>
> 1 - Does "take ... keys" mean read then out of the TPM.
>
> 2 - Getting a public key from the TPM is easy.  Getting the private key is
> harder.  In addition, some keys can be created so that the private part
> never leaves the TPM.
>
> 3 - You have to specify whether this is TPM 1.2 or TPM 2.0.  Then I may be
> able to point you to sample code.
>
>
> On 11/2/2016 11:06 PM, Zvi Vered wrote:
>
>>
>> I want to use openssl in order to send\receive encrypted messages to a
>> server.
>>
>> My Target has TPM.
>>
>> Can you please explain how to configure the openssl library to take
>> public+private keys from TPM ?
>>
>> Should I use a specific TPM library ?
>>
>>
>
> --
> openssl-users mailing list
> To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20161103/eeab0403/attachment.html>