Re: [Opensc-devel] Adding libp11 (or its equivalent) to OpenSSL

[David W. <dw...@in...>]

On Sat, 2016-02-27 at 10:46 +0100, Nikos Mavrogiannopoulos wrote:
> 
> p11-kit is not about desktop. I don't even think it provides any
> desktop integration. It is about configuration of pkcs11 modules in a
> system and coordination of the usage of PKCS #11. For example one
> application could use smart cards even if it is linked with all of
> openssl, nss or gnutls (and that's a very common scenario in complex
> applications).

However, those benefits are achieved just by going via p11-kit-proxy.so
as the default PKCS#11 provider — that's how I already did it for
engine_pkcs11, after all.

So perhaps we are better off keeping it simple. Just have our own URI
parsing (we can *lift* p11-kit's, we have a basic implementation in the
engine already that I put there, *and* Jaroslav has offered a version
(thanks).

Am I missing something else that a direct dependency on libp11-kit
would give us?


-- 
dwmw2