Linux equivalent of WinCrypt API

Question

when I need to authenticate client applications against X.509 protected SSL, TLS and SSH based servers in Windows, I use the WinCrypt functions to handle the certificate interfacing functionality.

What is the equivalent of WinCrypt for Linux?, I'm looking for smartcard or secure usb token based APIs where possible.

Thanks.

Answer 1

Both OpenSSL and GnuTLS provide full X.509/SSL/TLS cryptographic functionality, while also supporting smart cards via the OpenSC library.

I am not sure what authenticating against an SSH server implies, but you may want to have a look at the OpenSSH project.

Answer 2

PKCS#11 is probably the only real alternative for anything meaningful on Linux, especially if considering hardware access, unfortunately. The typical strength/problem of Linux: too many projects to choose from. And one can only be standard in a K or G world.