Hi Martin. Sorry, it didn't crash...

When I said "it fails", I meant "it doesn't do anything". The Keychain  
remains visible in Keychain Access, the OpenSC.tokend process  
continues to run, all apparently "normal"...

Thanks.

João

On Sep 12, 2009, at 5:55 PM, Martin Paljak wrote:

> Look into /Library/Logs/CrashReports/ (with sudo) and send the OpenSC
> log, if available (assuming it crashed, which was the case with me).
>
> I can check your build tomorrow.
>
> Thanks,
>
> On 12/09/2009, João Poupino <joao.poup...@ist.utl.pt> wrote:
>> [Resending the message due to the 40KB attachment limit]
>>
>> Hi,
>>
>> I've attached two packages compiled on Snow Leopard:
>> OpenSC (universal binary: x86_64, i386 and ppc7400);
>> OpenSC.tokend (universal binary x86_64, i386, ppc7400).
>>
>>
>> OpenSC itself appears to be working fine, at least the command line
>> tools and pkcs11-module.so work OK. However, I'm having trouble with
>> OpenSC.tokend: the card is recognized, the certificates are  
>> recognized
>> and all seems perfectly OK but, as soon as I try to use a certificate
>> to login to a site, it fails mysteriously. Putting OpenSC in debug
>> mode didn't help much and the debug messages generated by the Tokend
>> itself aren't that helpful either...
>>
>>
>> OpenSC was compiled by downloading the SCA build scripts, and the
>> following patch was applied to the Makefile:
>>
>> --- Makefile_        2009-09-12 01:23:20.000000000 +0100
>> +++ Makefile 2009-09-12 01:53:02.000000000 +0100
>> @@ -177,9 +177,11 @@
>>
>> build-opensc: fetch-opensc
>>      cd opensc && \
>> +    CFLAGS="-arch x86_64 -arch i386 -arch ppc7400" \
>> +    LDFLAGS="-arch x86_64 -arch i386 -arch ppc7400" \
>>      OPENSSL_CFLAGS="-I$(BUILDHOME)/compiled-openssl/Library/OpenSC/
>> include" \
>>      OPENSSL_LIBS="-L$(BUILDHOME)/compiled-openssl/Library/OpenSC/lib -
>> lcrypto" \
>> -    ./configure --prefix=/Library/OpenSC --sysconfdir=/Library/OpenSC/
>> etc --enable-pcsc && \
>> +    ./configure --prefix=/Library/OpenSC --sysconfdir=/Library/OpenSC/
>> etc --enable-pcsc --disable-dependency-tracking && \
>>      make && \
>>      make install prefix=$(BUILDHOME)/compiled-opensc/Library/OpenSC
>>      touch $@
>>
>> The OpenSC package was then created with "make package-opensc".
>>
>> Compiling OpenSC.tokend is a bit trickier, after giving up on
>> darwinbuild, I used Martin Paljak's instructions [1]:
>>
>> In order to compile, the following patch for OpenSC.tokend is needed:
>>
>> diff -urN OpenSC_/OpenSCToken.h OpenSC/OpenSCToken.h
>> --- OpenSC_/OpenSCToken.h    2009-09-12 16:36:10.000000000 +0100
>> +++ OpenSC/OpenSCToken.h     2009-09-12 15:11:17.000000000 +0100
>> @@ -76,7 +76,7 @@
>>      //virtual void authenticate(CSSM_DB_ACCESS_TYPE mode, const
>> AccessCredentials *cred);
>>      bool _verifyPIN(int pinNum, const unsigned char *pin, size_t
>> pinLength);
>>
>> -  bool OpenSCToken:: _changePIN( int pinNum,
>> +  bool _changePIN( int pinNum,
>>                                  const unsigned char *oldPin, size_t
>> oldPinLength,
>>                                  const unsigned char *newPin, size_t
>> newPinLength );
>>
>>
>> The Tokend was first compiled with Leopard's SDK, in order to support
>> the i386 and ppc7400 architectures.
>>
>> To compile the Tokend for x86_64, using Snow Leopard's SDK, the
>> following frameworks had to be changed from the Leopard versions
>> (provided by Martin) to the Snow Leopard versions:
>>
>> Security.framework
>> SecurityTokend.framework
>> security_cdsa_client.framework
>> security_cdsa_utilities.framework
>> security_utilities.framework
>>
>> You can get the necessary files at [2].
>>
>> In the end, the lipo(1) tool was used to generate the universal  
>> binary
>> for the Tokend.
>>
>> If anyone is willing to test it and verify if it's working or not  
>> (and
>> why it's not working...) it would be great.
>>
>> Thanks.
>>
>> João
>>
>> [1] - http://wiki.github.com/martinpaljak/opensc.tokend
>> [2] - http://src.macosforge.org/Roots/10A432/
>>
>> P.S. - The OpenSC version is 0.11.9 + Portugal's eID card support
>> (experimental)
>>
>>
>> The packages are at:
>>
>> http://web.ist.utl.pt/~joao.poupino/OpenSC.pkg.zip
>> http://web.ist.utl.pt/~joao.poupino/OpenSC.tokend.zip
>>
>>
>> On Sep 3, 2009, at 8:39 PM, Miller, Timothy J. wrote:
>>
>>> Afore I go build it, has anyone else done so?
>>>
>>> -- Tim
>>> _______________________________________________
>>> opensc-devel mailing list
>>> opensc-devel@lists.opensc-project.org
>>> http://www.opensc-project.org/mailman/listinfo/opensc-devel
>>
>> _______________________________________________
>> opensc-devel mailing list
>> opensc-devel@lists.opensc-project.org
>> http://www.opensc-project.org/mailman/listinfo/opensc-devel
>>
>
> -- 
> Sent from my mobile device
>
> Martin Paljak
> http://martin.paljak.pri.ee
> GSM:+3725156495

_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to