[Opendnssec-user] Looking for a "cheap" HSM

Rick van Rein (OpenFortress) rick at openfortress.nl
Mon Jun 24 16:39:25 CEST 2013


Hi,

> I still dont get it. I could register a PKCS#11 module on my firefox to communicate with an HSM.
> But that doesnt involve, in any way, linking "john.doe at example.com" authenticated user with a certificate stored on HSM.

I read that Mozilla tries to access the store in which it found a certificate.

> I must be missing something, like a browser addon, special library initialization (not covered by pkcs#11 standard) or something-else, that will tell HSM to get the correct certificate/partition.

It's been to long for me doing this on a browser, too.  Anyone else?

-Rick




More information about the Opendnssec-user mailing list