Re: Re: OpenSwan

does openswan use engine_pkcs11 like strongswan
or do they still use the native opensc interface?

I don't want deep hacked up changes in opensc,
so if they use that interface, you would have to hack
their code.

but if they use engine_pkcs11, we could add some
".X" syntax where you can specify if you want the
second, third ... certificate with one id.

sure, would be ugly, but practical ...

> Looks like opensc-api, the pluto-daemon is linked against
> libopensc, libssl, libopenct and libpcsclite here.

oops, ok, openssl :(

sorry, no time to dive into their code this week .

Regards, Andreas