Re: using an OpenPGP card with Java (keytool and jarsigner)

2014-01-21 Thread Stefan Xenon
Am 08.01.2014 16:26, schrieb Hans-Christoph Steiner: On 01/08/2014 07:02 AM, Werner Koch wrote: On Tue, 7 Jan 2014 15:32, h...@guardianproject.info said: OpenPGP card as a PKCS11 keystore. It seems that things are close: Java can use NSS as a provider of PKCS11. I guess the question is

Re: using an OpenPGP card with Java (keytool and jarsigner)

2014-01-17 Thread Werner Koch
On Fri, 17 Jan 2014 02:24, se...@literati.org said: Scute works great with Firefox, but keep in mind it requires gpg-agent (or Sure. That is the whole point of the exercise. at least scdaemon). AFAIK it's not intended to work with anything other than Firefox right now. I've been meaning to

Re: using an OpenPGP card with Java (keytool and jarsigner)

2014-01-17 Thread Hans-Christoph Steiner
On 01/17/2014 03:05 AM, Werner Koch wrote: On Fri, 17 Jan 2014 02:24, se...@literati.org said: Scute works great with Firefox, but keep in mind it requires gpg-agent (or Sure. That is the whole point of the exercise. at least scdaemon). AFAIK it's not intended to work with anything

Re: using an OpenPGP card with Java (keytool and jarsigner)

2014-01-16 Thread Sean Lynch
On Wed, Jan 8, 2014 at 4:02 AM, Werner Koch w...@gnupg.org wrote: On Tue, 7 Jan 2014 15:32, h...@guardianproject.info said: OpenPGP card as a PKCS11 keystore. It seems that things are close: Java can use NSS as a provider of PKCS11. I guess the question is whether opensc is making a

Re: using an OpenPGP card with Java (keytool and jarsigner)

2014-01-13 Thread Werner Koch
On Wed, 8 Jan 2014 16:26, h...@guardianproject.info said: key #3 is for authentication, is there some restriction in the OpenPGP card that would prevent the certificate/key combo in position #3 from being used for signing? No. At least not enforced by the card or GnuPG. What I read there

Re: using an OpenPGP card with Java (keytool and jarsigner)

2014-01-08 Thread Werner Koch
On Tue, 7 Jan 2014 15:32, h...@guardianproject.info said: OpenPGP card as a PKCS11 keystore. It seems that things are close: Java can use NSS as a provider of PKCS11. I guess the question is whether opensc is making a PKCS#11 interface to the OpenPGP card, that's the bit that I don't Scute

Re: using an OpenPGP card with Java (keytool and jarsigner)

2014-01-08 Thread Hans-Christoph Steiner
On 01/08/2014 07:02 AM, Werner Koch wrote: On Tue, 7 Jan 2014 15:32, h...@guardianproject.info said: OpenPGP card as a PKCS11 keystore. It seems that things are close: Java can use NSS as a provider of PKCS11. I guess the question is whether opensc is making a PKCS#11 interface to the

using an OpenPGP card with Java (keytool and jarsigner)

2014-01-07 Thread Hans-Christoph Steiner
Hey all, Does anyone know if there is any chance of using an OpenPGP smart card for Java? I know that GnuPG doesn't support PKCS#11, but I was wondering if things work the otherway around: java using the OpenPGP card. It would be super useful to be able to use the same smartcard for both

Re: using an OpenPGP card with Java (keytool and jarsigner)

2014-01-07 Thread NdK
Il 07/01/2014 04:01, Hans-Christoph Steiner ha scritto: Does anyone know if there is any chance of using an OpenPGP smart card for Java? I know that GnuPG doesn't support PKCS#11, but I was wondering if things work the otherway around: java using the OpenPGP card. It would be super useful

Re: using an OpenPGP card with Java (keytool and jarsigner)

2014-01-07 Thread Hans-Christoph Steiner
NdK wrote: Il 07/01/2014 04:01, Hans-Christoph Steiner ha scritto: Does anyone know if there is any chance of using an OpenPGP smart card for Java? I know that GnuPG doesn't support PKCS#11, but I was wondering if things work the otherway around: java using the OpenPGP card. It would be

Re: using an OpenPGP card with Java (keytool and jarsigner)

2014-01-07 Thread Hans-Christoph Steiner
On 01/07/2014 09:32 AM, Hans-Christoph Steiner wrote: NdK wrote: Il 07/01/2014 04:01, Hans-Christoph Steiner ha scritto: Does anyone know if there is any chance of using an OpenPGP smart card for Java? I know that GnuPG doesn't support PKCS#11, but I was wondering if things work the