Alessandro Premoli wrote:
Second scenario: PKCS#11 lib with lock_login = false
1) start thunderbird
2) read an encrypted message (it asks user pin, but fails to decrypt the
message, the PKCS#11 lib is unusable)
3) pkcs11-tool works correctly and displays all the info requested
Just an addition to this second scenario: pkcs11-tool -I works, but a
pkcs11-tool -s fails with the following errors:
%pkcs11-tool -s -l
Please enter User PIN:
Using signature algorithm RSA-X-509
hello
card-cardos.c:800:cardos_compute_signature: returning with: Internal error
sec.c:53:sc_compute_signature: returning with: Internal error
pkcs15-sec.c:331:sc_pkcs15_compute_signature: sc_compute_signature()
failed: Internal error
error: PKCS11 function C_SignFinal failed: rv = CKR_GENERAL_ERROR (0x5)
Aborting.
So it seems that crypto functions don't work at all with lock_login = false.
--
Alessandro
_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel