You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
If you followed thus far, your token is now fitted with a private RSA key that it generated itself and never divulged to anybody (not even the host computer). Assuming "engine_pkcs11":http://www.opensc-project.org/engine_pkcs11/ is installed, we can use this key and openssl to create
109
+
If you followed thus far, your token is now fitted with a private RSA key that it generated itself and never divulged to anybody (not even the host computer). Assuming engine_pkcs11 is installed, we can use this key and openssl to create
110
110
a self signed certificate, still without divulging the key; the necessary cryptographic computations will occur on-token.
111
111
112
-
Let's start the OpenSSL interactive shell and load the "engine pkcs11":http://www.opensc-project.org/engine_pkcs11/ so that OpenSSL can ask the token to do the crypto (as opposed to doing it from your computer's CPU).
112
+
Let's start the OpenSSL interactive shell and load the engine pkcs11 so that OpenSSL can ask the token to do the crypto (as opposed to doing it from your computer's CPU).
113
113
* <b>Linux</b>: open a terminal and type this (skipping the prompts):
You probably want to make your token work with other applications than `pkcs15-init` and OpenSSL: see [[Application Support|Using-smart-cards-with-applications]].
195
195
196
-
If you want to login to your computer with your smart card or crypto token, please note that OpenSC 0.10 does not include the pam module and the openssl engine any more. We suggest you install
197
-
"libp11":http://www.opensc-project.org/libp11/, "engine_pkcs11":http://www.opensc-project.org/engine_pkcs11/ and one of "pam_p11":http://www.opensc-project.org/pam_p11/ (a simple authentication module) or pam_pkcs11":http://www.opensc-project.org/pam_pkcs11/ (a full featured authentication module).
196
+
If you want to login to your computer with your smart card or crypto token, please note that OpenSC 0.10 does not include the pam module and the openssl engine any more. We suggest you install libp11, engine_pkcs11 and one of pam_p11 (a simple authentication module) or pam_pkcs11 (a full featured authentication module).
0 commit comments