Re: [opencryptoki-users] Opencrptoki & Strongswan 4.1

[David M. <bl...@gm...>]

On 4/18/07, Tom Lendacky <to...@us...> wrote:

>
>  Sorry, the post got lost in my long list of emails...
>
>  We are working on moving up to the v2.2 level of the spec.  However,
>  there is no time line in place as to when the work will be complete.
>

Ahh, cool. The fact that it's planned is a Good Thing for us :) The
ability to store x.509 keys/certs in the Thinkpad TPM module for ipsec
auth is something we're quite keen to have.

I'm currently seeing how hard it would be to patch strongswan "back"
to pkcs#11 2.1 spec, but that's going back quite a way (initial
smartcard support commit in fact. The very next commit in their cvs
repository is moving up to v2.2, and that's for the old 2.x series,
not the current 4.x code).

-David
>  Thanks,
>  Tom
>
>  > -David
>