Your message dated Wed, 23 Aug 2023 14:47:07 +0200
with message-id <[email protected]>
and subject line Re: opensc: switching key sizes after pkcs15-init -E
impossible with muscle card
has caused the Debian Bug report #559471,
regarding opensc: switching key sizes after pkcs15-init -E impossible with
muscle card
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
559471: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=559471
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: opensc
Version: 0.11.4-5+lenny1
Severity: normal
When initializing a card with
pkcs15-init -E --create-pkcs15 --no-so-pin
pkcs15-init --store-pin --auth-id 01 --label "User Name"
pkcs15-init --generate-key rsa/2048 --auth-id 01 --split-key
then again but this time with a 1024 bit key:
pkcs15-init -E --create-pkcs15 --no-so-pin
pkcs15-init --store-pin --auth-id 01 --label "User Name"
pkcs15-init --generate-key rsa/1024 --auth-id 01 --split-key
I'm getting the following error:
[pkcs15-init] iso7816.c:102:iso7816_check_sw: Unknown SWs; SW1=9C, SW2=03
[pkcs15-init] muscle.c:557:msc_generate_keypair: returning with: Card command
failed
[pkcs15-init] card.c:678:sc_card_ctl: returning with: Card command failed
[pkcs15-init] pkcs15-muscle.c:272:muscle_generate_key: Unable to generate key
[pkcs15-init] pkcs15-muscle.c:273:muscle_generate_key: returning with: Card
command failed
Failed to generate key: Card command failed
I'm using a Gemalto TOP IM FIPS CY2 (Cyberflex Access 64k v2)
in a Gemalto USB Shell V2 (GemPC Key) (CCID compliant).
I'm using the MCardApplet from the musclecard project in its latest
incarnation, the one from the opensc wiki at:
http://www.opensc-project.org/opensc/attachment/wiki/Cyberflex/CardEdgeII.ijc
When I re-upload the applet to the card and initialize the password
according to Howto at http://www.opensc-project.org/opensc/wiki/Cyberflex
I can successfully generate a 1024 bit key.
Looks like there is some persistent state after pkcs15-init -E that should
be gone after initializing the card with pkcs15-init.
-- System Information:
Debian Release: 5.0.3
APT prefers stable
APT policy: (500, 'stable')
Architecture: i386 (i686)
Kernel: Linux 2.6.26-1-686 (SMP w/1 CPU core)
Locale: LANG=en_US.ISO-8859-15, LC_CTYPE=en_US.ISO-8859-15 (charmap=ISO-8859-15)
Shell: /bin/sh linked to /bin/bash
Versions of packages opensc depends on:
ii libc6 2.7-18 GNU C Library: Shared libraries
ii libltdl3 1.5.26-4 A system independent dlopen wrappe
ii libopensc2 0.11.4-5+lenny1 SmartCard library with support for
ii libssl0.9.8 0.9.8g-15+lenny5 SSL shared libraries
ii zlib1g 1:1.2.3.3.dfsg-12 compression library - runtime
opensc recommends no packages.
opensc suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Closing as this bug is very old. Please reopen if you still can reproduce it.
--- End Message ---
