• Open Menu Close Menu
  • Apple
  • Shopping Bag
  • Apple
  • Mac
  • iPad
  • iPhone
  • Watch
  • TV
  • Music
  • Support
  • Search apple.com
  • Shopping Bag

Lists

Open Menu Close Menu
  • Terms and Conditions
  • Lists hosted on this site
  • Email the Postmaster
  • Tips for posting to public mailing lists
Re: [Fed-Talk] Beta version of "keychain-pkcs11" available
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Fed-Talk] Beta version of "keychain-pkcs11" available


  • Subject: Re: [Fed-Talk] Beta version of "keychain-pkcs11" available
  • From: "Blumenthal, Uri - 0553 - MITLL" <email@hidden>
  • Date: Wed, 26 Sep 2018 19:34:27 +0000
  • Thread-topic: [Fed-Talk] Beta version of "keychain-pkcs11" available

   > >I mean functionality similar to SmartCardVerify plugin that enforces
   > >computer access policy.
   >
   > I think this is out of scope for a PKCS#11 library.

It most certainly is out of scope for a PKCS#11 library - but I wonder how your
organization addresses that need (assuming it has that need). Because I don't
think MacOS includes a way to do that. We ended up using SmartCardVerify to
supplement the available functionality.

    >>Could you please point me at the comments in Chrome about the changes
    >>required for conversion?
    >
    >Sure, the one I was thinking of was in
src/net/ssl/client_cert_store_mac.cc,
    >specifically:...

Thanks! Will get back if need more info.

Attachment: smime.p7s
Description: S/MIME cryptographic signature

 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:

This email sent to email@hidden

References: 
 >Re: [Fed-Talk] Beta version of "keychain-pkcs11" available (From: Uri Blumenthal <email@hidden>)
 >Re: [Fed-Talk] Beta version of "keychain-pkcs11" available (From: Ken Hornstein <email@hidden>)
 >Re: [Fed-Talk] Beta version of "keychain-pkcs11" available (From: "Blumenthal, Uri - 0553 - MITLL" <email@hidden>)
 >Re: [Fed-Talk] Beta version of "keychain-pkcs11" available (From: Ken Hornstein <email@hidden>)
 >Re: [Fed-Talk] Beta version of "keychain-pkcs11" available (From: "Blumenthal, Uri - 0553 - MITLL" <email@hidden>)
 >Re: [Fed-Talk] Beta version of "keychain-pkcs11" available (From: Ken Hornstein <email@hidden>)

  • Prev by Date: Re: [Fed-Talk] Beta version of "keychain-pkcs11" available
  • Next by Date: [Fed-Talk] The Dance: MDM <-> APNS <-> iOS Device
  • Previous by thread: Re: [Fed-Talk] Beta version of "keychain-pkcs11" available
  • Next by thread: [Fed-Talk] The Dance: MDM <-> APNS <-> iOS Device
  • Index(es):
    • Date
    • Thread