2010/7/20 Stef Walter <stef-l...@memberwebs.com>:
> On 07/20/2010 10:16 AM, Martin Paljak wrote:
>> So maybe the
>> "PKCS#11 directory" [3] is the best solution I've seen this far.
>
> That's certainly a good start.

The PKCS#11 tokend [1] (tokend above any PKCS#11) does use the
"PKCS#11 directory" [3].
Having to configure a file is far from the "just work" approach used
on Mac OS X. So the probe() method of PKCS#11 tokend loads every
library present in the "PKCS#11 directory" and tries to use it [2].
If every thing works up to C_GetTokenInfo() then the current PKCS#11
is selected.

It is not perfect. A score mechanism may be better. But PKCS#11 has no
way to report "I support this token very well" or "I have a limited
support of this token".

Bye

[1] http://smartcardservices.macosforge.org/trac/browser/trunk/Tokend/PKCS11
[2] 
http://smartcardservices.macosforge.org/trac/browser/trunk/Tokend/PKCS11/GemaltoToken.cpp#L278
[3] http://wiki.cacert.org/Pkcs11TaskForce

-- 
 Dr. Ludovic Rousseau
_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to