PKCS11 support

Hi,


Is it possible to support the pkcs11 standard (+ plugin dll's)

Than I could use something like http://www.opensc-project.org/ to support our smartcards. You could also look to http://www.opensc-project.org/pkcs11-helper/. (BTW pkcs11-helper also works on windows - see sources)
I'm currently not sure what the easiest way is.

I'm thinking of using it myself later in one of our applications. Firefox for example supports pkcs11 dll's and does work succesfully with our smartcards.
I think it might be pretty easy to add this feature when using the pkcs11-helper.

It would be nice if we could use our smartcard technology also for flashfxp

An alternative would be supporting MSCAPI, since our smartcards can work with that also.



Regards
JGO

I'm not entirely clear as to what type of PKCS11 support your interested in, Are you referring to protecting FlashFXP with a smartcard or using the smartcard as a login for your secure ftp site?

It would be to login to a secured site.

Btw atm how are the client certificates loaded in flashfxp protected ?
If I put a password on flashfxp, are they encrypted with it ? Or are they internally just encrypted with a static key ?

Yes, If you set an application password this password is used to encrypt the certificates, otherwise a generic key is used.

Our certificate storage supports PKCS11, although I'm not sure how it would communicate with a smartcard. A 3rd party method might be needed for communication.

I know, firefox has the possibility to load any pkcs11 provider dll.
(example: http://www.secure-endpoints.com/kcac...stkpkcs11.html)

If you could make that feature or something alike it would be good.
A good starting point is the website I mentioned.

If you support pkcs11 modules, any provider should be usable.

EDIT: I might be even easier by using http://www.opensc-project.org/engine_pkcs11
Will look into that later. But perhaps I could add this myself for anything using openssl.

At the moment there doesn't appear to be very much of a demand for this, If enough people are interested in seeing FlashFXP support PKCS11 we can take a second look at adding support for it.