Hi Eddy, see comments below

Eddy Nigg (StartCom Ltd.) wrote:
> Jan Just Keijser wrote:
>> Right now I've got it boiled down to
>> - install a single RPM (for RHEL4, Fedora Core 5/6, OpenSuSE 10.x) or 
>> install one or two .deb packages on Debian or Ubuntu
>> - follow instructions on how to add the libetpkcs11.so module to Firefox 
>> and/or Thunderbird
>>
>> this seems to work quite well, and if you throw in enough screenshots 
>> all users can load the library without too many problems.
>>   
> BTW, that should work in a similar way with OpenSC and the loading of 
> opensc-pkcs11.so, at least that's what I'm doing on my personal PC.

hmmm even when I force the loading of 'opensc-pkcs11.so' (the one from 
the SVN tarball with your patch applied) , I get:

./pkcs11-tool --module ../../pkcs11/.libs/opensc-pkcs11.so -L
[opensc-pkcs11] card-cardos.c:262:cardos_check_sw: file not found
[opensc-pkcs11] iso7816.c:459:iso7816_select_file: returning with: File 
not found
[opensc-pkcs11] card-cardos.c:438:cardos_select_file: returning with: 
File not found
[opensc-pkcs11] card.c:554:sc_select_file: returning with: File not found
[opensc-pkcs11] pkcs15-postecert.c:337:sc_pkcs15emu_postecert_init: 
Failed to initialize Postecert and Cnipa emulation: Unsupported card
[opensc-pkcs11] card-cardos.c:262:cardos_check_sw: file not found
[opensc-pkcs11] iso7816.c:459:iso7816_select_file: returning with: File 
not found
[opensc-pkcs11] card-cardos.c:438:cardos_select_file: returning with: 
File not found
[opensc-pkcs11] card.c:554:sc_select_file: returning with: File not found
[opensc-pkcs11] card-cardos.c:262:cardos_check_sw: file not found
[opensc-pkcs11] iso7816.c:464:iso7816_select_file: returning with: File 
not found
[opensc-pkcs11] card-cardos.c:438:cardos_select_file: returning with: 
File not found
[opensc-pkcs11] card.c:554:sc_select_file: returning with: File not found
[opensc-pkcs11] pkcs15.c:755:sc_pkcs15_bind: returning with: Unsupported 
card
Available slots:
Slot 0           (empty)
Slot 1           (empty)
Slot 2           (empty)
Slot 3           (empty)
Slot 4           (empty)
Slot 5           (empty)
Slot 6           (empty)
Slot 7           (empty)


while there _is_ a token inserted into the PC.

>> if a "fully-opensc" solution would work with the etokens that we have 
>> then that would be fine with me. Compatibility with the Aladdin RTE 
>> software would be a huge bonus but if the opensc solution works better 
>> then I am sure that I convince our users to re-initialize their tokens.
>>   
> I'm afraid, but this isn't going to happen in the near future...so 
> it's an option explored...
If PKCS11 access works the same using both opensc-pkcs11 and using the 
Aladdin RTE stuff then this should be fine, right? I see no need to 
support PKCS15 at this time.

>> However, before a fully-opensc solution works I would have to make sure that
>> - initializing our etokens works, 
> I think this is something which is going to be fixed now.
Excellent!

regards,

Jan Just Keijser
System Integrator
Nikhef / Amsterdam

_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to