Re: Problem with x.509 certificate and OpenPGP Card

2012-11-04 Thread Nguyễn Hồng Quân
Hello, You can use with OpenSC PKCS#11 module. Some note: https://docs.google.com/a/mbm.vn/document/d/1qjiFJGCTWOhzYgMbJMZ79gDxiDXrY4xtNfRD1siXtcg/edit# On 10/23/2012 10:22 PM, Michael Freischlad wrote: Dear all, I've got a OpenPGP Card 2.0 and would like to use it with Thunderbird for

Import private key from PEM file?

2012-06-18 Thread Nguyễn Hồng Quân
Hi all, Is it possible to import private key from PEM file (which I exported from p12 file using OpenSSL: openssl pkcs12 -in secret-gpg-key.p12 -nocerts -out gpg-key.pem)? Is it possible to import pairs of certificate/private key from p12 file using gpgsm? I tried doing this, but then the

Re: Import private key from PEM file?

2012-06-18 Thread Nguyễn Hồng Quân
Hi, I tried again but gpgsm --list-secrret-keys still return nothing: hongquan@Pangolin ~/Works/Certificates/StartCom $ gpgsm -v --import quanngu...@mbm.vn.p12 gpgsm: gpgsm: GPG_TTY has not been set - using maybe bogus default gpgsm: gpg-protect-tool: 1224 bytes of 3DES encrypted text gpgsm:

Re: Import private key from PEM file?

2012-06-18 Thread Nguyễn Hồng Quân
Hi, On Mon 18 Jun 2012 04:31:22 PM ICT, Werner Koch wrote: Why do you think you will see a new entry in the secret key listing, if nothing changed? I don't need new entry, I just need 'existing' entry. But none is shown. hongquan@Pangolin ~ $ gpgsm --list-secret-keys

Re: Import private key from PEM file?

2012-06-18 Thread Nguyễn Hồng Quân
Hi, On 06/18/2012 04:31 PM, Werner Koch wrote: How about importing from PEM file? Is there a command to do that? gpgsm detects armor or binary itself. If you want to tell it explicitly, use one of --assume-{armor,binary,base64}. It is all in the manual. I meant I want to import the PEM

Re: Import private key from PEM file?

2012-06-18 Thread Nguyễn Hồng Quân
So, the gpgsm won't work with PEM file which contain only private key? (Maybe you forgot that I asked 2 questions in the first email 1: About PEM file which contains only private key. 2: About P12 file which contains both private key and certificate). On Mon 18 Jun 2012 08:49:52 PM ICT, Werner

Re: Import private key from PEM file?

2012-06-18 Thread Nguyễn Hồng Quân
So, do you think the private key and the certificate in the same p12 file don't match? The private key I expect to see was imported (in companion with certificate) earlier from a p12 file. I checked with OpenSSL and make sure that the p12 file contain both private key and certificate. On

Re: GnuPG 2 + OpenPGP card on F17

2012-05-30 Thread Nguyễn Hồng Quân
Hi, After pkill gpg-agent, it seems that gg-agent still run: hongquan@Pangolin ~ $ pkill gpg-agent hongquan@Pangolin ~ $ ps ax | grep gpg-agent 1991 ?Ss 0:00 /usr/bin/ssh-agent /usr/bin/gpg-agent --daemon --sh --write-env-file=/home/hongquan/.gnupg/gpg-agent-info-Pangolin

Re: How to make GPG release the token?

2012-04-26 Thread Nguyễn Hồng Quân
Hello, That's the Crypto Stick http://www.crypto-stick.com/ After trying pgp --card-status or gpg --card-edit, I cannot access the Crypto Stick with OpenSC, meaning opensc-tool does not work. Each time I use GPG, I have to reboot the computer in order to use OpenSC. On 04/26/2012 01:03 PM,

Re: How to make GPG release the token?

2012-04-26 Thread Nguyễn Hồng Quân
Thanks David, I'm starting to develop OpenSC to make it support fully the CryptoStick (which uses OpenPGP card). So I cannot uninstall OpenSC. Because the OpenSC does not support OpenPGP card fully, I sometimes use GPG to test the card. So there is no way to leave these two together? --

Re: How to make GPG release the token?

2012-04-26 Thread Nguyễn Hồng Quân
Thank you all On Thu 26 Apr 2012 03:43:17 PM ICT, Werner Koch wrote: Yes. Put this option into scdaemon.conf: --card-timeout N -- Regards, Quân ___ Gnupg-users mailing list Gnupg-users@gnupg.org

How to make GPG release the token?

2012-04-25 Thread Nguyễn Hồng Quân
Hello all, I'm using GnuPG and OpenSC to test my token. Each time I've done using GPG, the OpenSC cannot access the token. I have to reboot the computer to use OpenSC. There is a way to make the GnuPG release the token completely after use? -- Regards, Quân