# PKCS#11 support

- Thread: https://externals.io/message/49094
- Original archive: https://news-web.php.net/php.internals/49094
- Started by Tomasz Wyderka on 2010-07-19T21:49:44+00:00
- Messages: 7
- Reply by email to internals@lists.php.net
- More for agents: search with https://externals.io/search.md?q={query} · JSON API at https://externals.io/api · documentation at https://externals.io/llms.txt

---

## #49094 — Tomasz Wyderka — 2010-07-19T21:49:44+00:00

URL: https://externals.io/message/49094#49094

Hi,
I'm planning to write PKCS#11 extension for PHP using OpenSC library.

PKCS#11 is a software API for accessing cryptographic hardware like
smart cards or HSMs.
OpenSC library is implementation of PKCS#11 for Firefox and Thunderbird.

Could someone tell me if ours finished work can be included in
official PHP release??

Regards,
Tom

---

## #49095 — Scott MacVicar — 2010-07-19T22:28:26+00:00

URL: https://externals.io/message/49094#49095 · In reply to: #49094

It can be released on the PECL site but I doubt it would go in the default distribution.

- Scott



> Hi,
> I'm planning to write PKCS#11 extension for PHP using OpenSC library.
> 
> PKCS#11 is a software API for accessing cryptographic hardware like
> smart cards or HSMs.
> OpenSC library is implementation of PKCS#11 for Firefox and Thunderbird.
> 
> Could someone tell me if ours finished work can be included in
> official PHP release??
> 
> Regards,
> Tom

---

## #49096 — Paul van Brouwershaven — 2010-07-20T07:51:28+00:00

URL: https://externals.io/message/49094#49096 · In reply to: #49095

Hi Scott,

Op 20-7-2010 0:28, Scott MacVicar schreef:
> It can be released on the PECL site but I doubt it would go in the default distribution.

Why not including this in the default distribution? It would be great to have PKCS#11 support in the
default PHP distribution!

---

## #49097 — Scott MacVicar — 2010-07-20T08:30:02+00:00

URL: https://externals.io/message/49094#49097 · In reply to: #49096

> Hi Scott,
> 
> Op 20-7-2010 0:28, Scott MacVicar schreef:
> > […]
> 
> Why not including this in the default distribution? It would be great to have PKCS#11 support in the
> default PHP distribution!
> 

Well it has to be developed and tested first. so into PECL it goes for that.

Then there is the more important fact that is requires LGPL code, so we wouldn't bundle the library. Leaving it only being enabled for those who have OpenSC installed.

- Scott

---

## #49098 — Pierre Joye — 2010-07-20T08:43:12+00:00

URL: https://externals.io/message/49094#49098 · In reply to: #49096

hi Paul,

On Tue, Jul 20, 2010 at 9:51 AM, Paul van Brouwershaven
<paul@vanbrouwershaven.com> wrote:
> Hi Scott,
>
> Op 20-7-2010 0:28, Scott MacVicar schreef:
> > […]
>
> Why not including this in the default distribution? It would be great to have PKCS#11 support in the
> default PHP distribution!

To first develop new extensions in PECL is the way to go

Cheers,
-- 
Pierre

@pierrejoye | http://blog.thepimp.net | http://www.libgd.org

---

## #49099 — Paul van Brouwershaven — 2010-07-20T11:32:31+00:00

URL: https://externals.io/message/49094#49099 · In reply to: #49097

Op 20-7-2010 10:30, Scott MacVicar schreef:
> Then there is the more important fact that is requires LGPL code, so we wouldn't bundle the library. Leaving it only being enabled for those who have OpenSC installed.

Thats a good one, do you maybe know an other library that can be used so the code can be bundled to
get PKCS#11 support in PHP?

---

## #49100 — Pierre Joye — 2010-07-20T11:35:50+00:00

URL: https://externals.io/message/49094#49100 · In reply to: #49099

On Tue, Jul 20, 2010 at 1:32 PM, Paul van Brouwershaven
<paul@vanbrouwershaven.com> wrote:
> Op 20-7-2010 10:30, Scott MacVicar schreef:
> > […]
>
> Thats a good one, do you maybe know an other library that can be used so the code can be bundled to
> get PKCS#11 support in PHP?

I don't know any other to deal with SC. There was a discussion in
openssl about that, a while back, maybe check their archives to see if
there is something new.

However, I'd to say it again: new extension must be developed first in
PECL. Rquest to be bundled or not can be done later, once it is
stable/proven good enough/used :).

Cheers
-- 
Pierre

@pierrejoye | http://blog.thepimp.net | http://www.libgd.org