[Mono-list] Https (Webservice) authentication using PKCS#11 tokens

[Sebastien Pouliot]

On Tue, 2010-02-16 at 15:17 +0100, Mathias Tausig wrote:
> Hello!
> 
> I want to use certificate based client authentication for Webservice on
> a HTTPS server.
> If I load a .p12 file, that works just fine. But know I want to go one
> step further, and use a key stored on a PKCS#11 token. Is there any
> known implementation for such a thing? 

Not that I know of (please share your search results :-).

On Windows CryptoAPI can be used (with the framework types) to access an
hardware-based CSP. That likely put some limit on most people "need" for
pkcs11.

> The best concept that I could
> make up so far, was to write a PKCS#11 wrapper and then subclass RSA.

Yep, that's the right thing to do.

Sebastien