Re: openvpn + smartcard

Hi Ivars,

yes I am using SCB v0.9 , but only certain parts of it; this
probably 
explains why I have not seen this issue...
the OpenSSL issue is due to the fact that
- SCB is compiled against openssl 0.9.8e
- OpenVPN is compiled against openssl 0.9.7m
There is no easy way around it other than
- build your own SCB package and see if you can remove the
dependency on 
OpenSSL; most opensc tools actually do not require or use
openssl
- rebuild openvpn and link it against the openssl 0.9.8e as
found in the 
SCB 0.8+ package.

what kind of smart card are you using?

cheers,

JJK / Jan Just Keijser

PS I copied in the opensc-devel list to hear if they know of
any nice 
workarounds for this issue.

Ivars Strazdins wrote:
> Hello Jan Just,
> you are very responsive to openvpn users.
> I see you've reported in mailinglist that you have
working 
> openvpn/smartcard setup 
> (http://openvpn.net/archive/openvpn-users/2008-01/m
sg00279.html)
> Did you use smart card bundle (SCB) from
www.opensc-project.org ?
> If so, which version then?
> We have a problem here that any SCB version higher that
0.7 conflicts 
> with openvpn SSL library, producing an error ( The
ordinal 3873 could 
> not be located in the dynamic link library
LIBEAY32.dll)
> I wonder how did this work for you, unless you have
compiled your own 
> binaries.

_______________________________________________
opensc-devel mailing list
opensc-devellists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc
-devel

I already done this...

I am waiting for the test results of [1].

Alon.

[1] http://alon.barlev.googlepages.com/opensc-m
ingw-openssl-0.9.7.tar.bz2

On 2/29/08, Jan Just Keijser <janjustnikhef.nl> wrote:
> Hi Ivars,
>
>  yes I am using SCB v0.9 , but only certain parts of
it; this probably
>  explains why I have not seen this issue...
>  the OpenSSL issue is due to the fact that
>  - SCB is compiled against openssl 0.9.8e
>  - OpenVPN is compiled against openssl 0.9.7m
>  There is no easy way around it other than
>  - build your own SCB package and see if you can remove
the dependency on
>  OpenSSL; most opensc tools actually do not require or
use openssl
>  - rebuild openvpn and link it against the openssl
0.9.8e as found in the
>  SCB 0.8+ package.
>
>  what kind of smart card are you using?
>
>  cheers,
>
>  JJK / Jan Just Keijser
>
>  PS I copied in the opensc-devel list to hear if they
know of any nice
>  workarounds for this issue.
>
>  Ivars Strazdins wrote:
>  > Hello Jan Just,
>  > you are very responsive to openvpn users.
>  > I see you've reported in mailinglist that you
have working
>  > openvpn/smartcard setup
>  > (http://openvpn.net/archive/openvpn-users/2008-01/m
sg00279.html)
>  > Did you use smart card bundle (SCB) from
www.opensc-project.org ?
>  > If so, which version then?
>  > We have a problem here that any SCB version
higher that 0.7 conflicts
>  > with openvpn SSL library, producing an error (
The ordinal 3873 could
>  > not be located in the dynamic link library
LIBEAY32.dll)
>  > I wonder how did this work for you, unless you
have compiled your own
>  > binaries.
>
>  _______________________________________________
>  opensc-devel mailing list
>  opensc-devellists.opensc-project.org
>  http://www.opensc-project.org/mailman/listinfo/opensc
-devel
>
_______________________________________________
opensc-devel mailing list
opensc-devellists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc
-devel