2011-11-01 18:57 AEST by Arthur Barrett - The :sserver: client protocol should support smartcard (FIPS 140 PIV) and the use of it should be 
documented.

Basically FIPS 140 PIV is the use of an RSA key on a smartcard that is accessed by a vendor specific API. 

Note: the smartcard may require a PIN each time the RSA key is accessed, so this authentication 
technique probably relies on the use of CVSAgent to cache the credentials.

 
Note: 2.5.05 has a native schannel for windows (see bug 5747).

2011-11-02 07:45 AEST by Arthur Barrett - Does openssl needs an upgrade (to the OpenSSL FIPS Object Module)
http://openssl.org/docs/fips/ 

eg:
this patch is for the POCO library to switch from openssl to fips:
http://sourceforge.net/tracker/?func=detail&aid=3031972&group_id=132964&atid=725711