Hi all, I've been using the opensc CLI tools for some time together with the Siemens CardAPI pkcs11 library. As the Linux version of CardAPI has some, in my opinion, severe drawbacks (e.g. no support for protected authentication path, no support for C_InitToken), I would like to switch to the opensc driver, which should provide these missing features. Unfortunately, so far I was unsuccessful - I tried initializing an uninitialized (i.e. untouched by CardAPI) card: opensc 0.11.2 recognizes it, but cannot initialize it:
# opensc-tool -l Readers known about: Nr. Driver Name 0 pcsc Cherry XX44 00 00 # opensc-tool --reader 0 --atr 3b:f2:18:00:02:c1:0a:31:fe:58:c8:08:74 # opensc-tool --reader 0 --name CardOS M4 # opensc-explorer OpenSC Explorer version 0.11.2 card-cardos.c:224:cardos_check_sw: ins invalid iso7816.c:464:iso7816_select_file: returning with: Unsupported INS byte in APDU card-cardos.c:400:cardos_select_file: returning with: Unsupported INS byte in APDU card.c:554:sc_select_file: returning with: Unsupported INS byte in APDU unable to select MF: Unsupported INS byte in APDU # pkcs15-init --create-pkcs15 -v -v -v sc.c:196:sc_detect_card_presence: called sc.c:201:sc_detect_card_presence: returning with: 1 Connecting to card in reader Cherry XX44 00 00... card.c:110:sc_connect_card: called reader-pcsc.c:542:pcsc_connect: Requesting reader features ... reader-pcsc.c:576:pcsc_connect: Reader supports pinpad PIN verification reader-pcsc.c:586:pcsc_connect: Reader supports pinpad PIN modification card.c:221:sc_connect_card: card info: CardOS M4, 1004, 0x0 card.c:222:sc_connect_card: returning with: 0 Using card driver Siemens CardOS. card.c:668:sc_card_ctl: called card-cardos.c:863:cardos_lifecycle_set: called card-cardos.c:817:cardos_lifecycle_get: called card-cardos.c:851:cardos_lifecycle_get: returning with: 0 card.c:678:sc_card_ctl: returning with: 0 card.c:532:sc_select_file: called; type=2, path=3f0050154946 card-cardos.c:396:cardos_select_file: called card-cardos.c:224:cardos_check_sw: ins invalid iso7816.c:464:iso7816_select_file: returning with: -1204 card-cardos.c:400:cardos_select_file: returning with: -1204 card.c:554:sc_select_file: returning with: -1204 profile.c:317:sc_profile_load: Trying profile file /usr/local/share/opensc/pkcs15.profile profile.c:325:sc_profile_load: profile /usr/local/share/opensc/pkcs15.profile loaded ok profile.c:317:sc_profile_load: Trying profile file /usr/local/share/opensc/cardos.profile profile.c:325:sc_profile_load: profile /usr/local/share/opensc/cardos.profile loaded ok About to create PKCS #15 meta structure. New Security Officer PIN (Optional - press return for no PIN). Please enter Security Officer PIN: Please type again to verify: Unblock Code for New User PIN (Optional - press return for no PIN). Please enter User unblocking PIN (PUK): Please type again to verify: card.c:532:sc_select_file: called; type=2, path=3f00 card-cardos.c:396:cardos_select_file: called card-cardos.c:224:cardos_check_sw: ins invalid iso7816.c:464:iso7816_select_file: returning with: -1204 card-cardos.c:400:cardos_select_file: returning with: -1204 card.c:554:sc_select_file: returning with: -1204 Failed to create PKCS #15 meta structure: Unsupported INS byte in APDU card.c:236:sc_disconnect_card: called card.c:251:sc_disconnect_card: returning with: 0 ctx.c:736:sc_release_context: called reader-openct.c:180:openct_reader_release: called reader-openct.c:180:openct_reader_release: called reader-openct.c:180:openct_reader_release: called reader-openct.c:180:openct_reader_release: called reader-openct.c:180:openct_reader_release: called reader-openct.c:165:openct_reader_finish: called So, what gives? It appears that opensc can't find some file on the smartcard, but I am unsure about that. If anyone can give me some insight into what went wrong, I'll be glad to try and produce a patch. regards, Daniel
_______________________________________________ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel
