We are evaluating the OpenVPN application for use as a Secure Sockets Layer VPN solution. In order to use it, we wanted to plug in our own cryptographic service provider CSP for all cryptography operations (such as SSL,TLS and IPv4).
We are evaluating the OpenVPN application for use as an SSL VPN solution. In order to use it, we wanted to plug in our own cryptographic service provider (CSP) for all cryptography operations (such as SSL,TLS and IPv4).
While looking into the code of OpenVPN, we found a reference to the MS CSP interface in the CryptoApi but couldn’t determine whether it is yet in use or not? In case it is not, could you please explain what we need to do to use our own CSP with OpenVPN for all cryptographic operations.
You will have to work with the underlying OpenSSL modules to insert your own CSP. Depending on your target environment, you might find the CSP Perl package useful.
It provides an interface to CSP and CA management OpenSSL command line tools. On Windows, OpenVPN can use the MS Crypto API to read certificates and keys from smart cards.
The Common Data Security Architecture framework provides another set of tools helpful in extending and modifying your CSP implementation for use with OpenSSL in your OpenVPN implementation.
