Re: CSR/p10 generation without openssl ?

n0r4h_nospam-openscdevel@xxxxxxxx wrote:
> Hello
>
> Id’like to know if it’s possible to generate a
> Certificate Signing Request in a pkcs10 format with
> openSC WITHOUT openssl, or am I doomed to use it and
> its engine stuff ?

well you could use every crypto library having some kind
of pkcs11 interface (for example nss, or Peter Gutmann's
cryptlib etc. ).

> (by the way is there some doc about it ?)

beside [1], sorry but I think that's all. Btw: do you
want to use the command line or some self written
application for this.

> Have you any idea of something lighter than this ? 
> I’m working on a size/resources contrained environment
> where even putting openSC is a bit heavy so I wish I
> could cannot avoid to add openssl :(

did you tried to build openssl without a lot features (ssl,
some crypt algs etc.) as you only need a small subset of the
openssl features. Apropos opensc: it would be really useful
if one could disable unneeded card drivers etc. at configure
time to reduce the size/complexity of opensc binary, if desired.

Nils

[1] http://www.opensc.org/files/doc/opensc.html#opensc.using.openssl