On 23/02/2011 21:19, Martin Paljak wrote: >> Waiting to "fix" CA issue, I'm trying to use an on-card key to >> authenticate a SSH user. > Which issue? http://www.opensc-project.org/pipermail/opensc-devel/2011-February/016065.html Seemed unrelated, but...
>> But when I try to use it, I get: >> -8<-- >> $ ssh otheruser@myhost >> Enter PIN for 'MyEID (User Auth)': >> C_Sign failed: 257 > This means: #define CKR_USER_NOT_LOGGED_IN (0x101UL) Uhm... So it *might* be related. Always "user not logged in"... > Having OpenSC debug.log would be useful - is the right PIN verified before as > it should be. I'll post it on my site ASAP. The PIN is right: if I give the wrong one, it clearly says so. >> Just issuing multiple times the same command (w/o touching the card or >> the reader!) solves the issue. > That is interesting. I'm seeing this as well quite a lot with different > Estonian eID cards recently. I've not extracted logs from pcscd for this > problem but that might be useful. I tink it's "normal" if pkcs11 module is loaded in a Mozilla app (that "pings" the card continuously, practically hogging it... but that's IMHO a bug in Mozilla code, that should work more cooperatively). But I unloaded it, so it shouldn't be the root of this isue. > Does unpower/hard reset of the card work? If I take the card out and reinsert it, then it's OK the first time. > If you could produce a pcscd/libccid log with USB level output [1] > would be very good. I'll do it and post it w/ the other. BYtE, Diego. _______________________________________________ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel
