Hi all, I'm trying to sign a file using compiled from sources opensc 12.2. Card is manufactured by Cryptotech and it has setcos 4.1.1 on board. The card was initialized by www.sigillum.pl<http://www.sigillum.pl> company. Even though PIN is fine and there are no failures in the card reading process I keep on receiving: Security status not satisfied, after sending portion of data for signing. Can anyone point me to some solution?
Here is the part of the logs which I guess is relevant: 0xb7b1d6c0 13:35:27.314 [opensc-pkcs11] framework-pkcs15.c:2630:pkcs15_prkey_sign: Initiating signing operation, mechanism 0x1. 0xb7b1d6c0 13:35:27.314 [opensc-pkcs11] card.c:292:sc_lock: called 0xb7b1d6c0 13:35:27.314 [opensc-pkcs11] reader-pcsc.c:511:pcsc_lock: called 0xb7b1d6c0 13:35:27.314 [opensc-pkcs11] framework-pkcs15.c:3611:reselect_app_df: reselect application df 0xb7b1d6c0 13:35:27.314 [opensc-pkcs11] card.c:571:sc_select_file: called; type=2, path=3f00de00 0xb7b1d6c0 13:35:27.314 [opensc-pkcs11] apdu.c:525:sc_transmit_apdu: called 0xb7b1d6c0 13:35:27.314 [opensc-pkcs11] card.c:292:sc_lock: called 0xb7b1d6c0 13:35:27.314 [opensc-pkcs11] reader-pcsc.c:243:pcsc_transmit: reader 'ACS ACR38U 00 00' 0xb7b1d6c0 13:35:27.314 [opensc-pkcs11] apdu.c:184:sc_apdu_log: Outgoing APDU data [ 7 bytes] ===================================== 00 A4 08 00 02 DE 00 ....... ====================================================================== 0xb7b1d6c0 13:35:27.314 [opensc-pkcs11] reader-pcsc.c:176:pcsc_internal_transmit: called 0xb7b1d6c0 13:35:27.363 [opensc-pkcs11] apdu.c:184:sc_apdu_log: Incoming APDU data [ 2 bytes] ===================================== 61 2D a- ====================================================================== 0xb7b1d6c0 13:35:27.363 [opensc-pkcs11] card.c:330:sc_unlock: called 0xb7b1d6c0 13:35:27.363 [opensc-pkcs11] iso7816.c:481:iso7816_select_file: returning with: 0 (Success) 0xb7b1d6c0 13:35:27.363 [opensc-pkcs11] card.c:597:sc_select_file: returning with: 0 (Success) 0xb7b1d6c0 13:35:27.363 [opensc-pkcs11] framework-pkcs15.c:2710:pkcs15_prkey_sign: Selected flags 12. Now computing signature for 3 bytes. 512 bytes reserved. 0xb7b1d6c0 13:35:27.363 [opensc-pkcs11] pkcs15-sec.c:190:sc_pkcs15_compute_signature: called 0xb7b1d6c0 13:35:27.363 [opensc-pkcs11] pkcs15-sec.c:191:sc_pkcs15_compute_signature: security operation flags 0x12 0xb7b1d6c0 13:35:27.363 [opensc-pkcs11] pkcs15-sec.c:273:sc_pkcs15_compute_signature: supported algorithm flags 0x80000033, private key usage 0x26 0xb7b1d6c0 13:35:27.363 [opensc-pkcs11] padding.c:273:sc_get_encoding_flags: called 0xb7b1d6c0 13:35:27.363 [opensc-pkcs11] padding.c:277:sc_get_encoding_flags: iFlags 0x12, card capabilities 0x80000033 0xb7b1d6c0 13:35:27.363 [opensc-pkcs11] padding.c:306:sc_get_encoding_flags: pad flags 0x10, secure algorithm flags 0x2 0xb7b1d6c0 13:35:27.363 [opensc-pkcs11] padding.c:307:sc_get_encoding_flags: returning with: 0 (Success) 0xb7b1d6c0 13:35:27.363 [opensc-pkcs11] pkcs15-sec.c:324:sc_pkcs15_compute_signature: DEE flags:0x00000012 alg_info->flags:0x80000033 pad:0x00000010 sec:0x00000002 0xb7b1d6c0 13:35:27.363 [opensc-pkcs11] padding.c:232:sc_pkcs1_encode: called 0xb7b1d6c0 13:35:27.363 [opensc-pkcs11] padding.c:236:sc_pkcs1_encode: hash algorithm 0x10, pad algorithm 0x0 0xb7b1d6c0 13:35:27.363 [opensc-pkcs11] padding.c:255:sc_pkcs1_encode: returning with: 0 (Success) 0xb7b1d6c0 13:35:27.363 [opensc-pkcs11] card.c:292:sc_lock: called 0xb7b1d6c0 13:35:27.363 [opensc-pkcs11] pkcs15-sec.c:42:select_key_file: called 0xb7b1d6c0 13:35:27.363 [opensc-pkcs11] card.c:571:sc_select_file: called; type=2, path=3f00df01efd5 0xb7b1d6c0 13:35:27.363 [opensc-pkcs11] apdu.c:525:sc_transmit_apdu: called 0xb7b1d6c0 13:35:27.363 [opensc-pkcs11] card.c:292:sc_lock: called 0xb7b1d6c0 13:35:27.363 [opensc-pkcs11] reader-pcsc.c:243:pcsc_transmit: reader 'ACS ACR38U 00 00' 0xb7b1d6c0 13:35:27.363 [opensc-pkcs11] apdu.c:184:sc_apdu_log: Outgoing APDU data [ 9 bytes] ===================================== 00 A4 08 00 04 DF 01 EF D5 ......... ====================================================================== 0xb7b1d6c0 13:35:27.363 [opensc-pkcs11] reader-pcsc.c:176:pcsc_internal_transmit: called 0xb7b1d6c0 13:35:27.419 [opensc-pkcs11] apdu.c:184:sc_apdu_log: Incoming APDU data [ 2 bytes] ===================================== 61 25 a% ====================================================================== 0xb7b1d6c0 13:35:27.419 [opensc-pkcs11] card.c:330:sc_unlock: called 0xb7b1d6c0 13:35:27.419 [opensc-pkcs11] iso7816.c:481:iso7816_select_file: returning with: 0 (Success) 0xb7b1d6c0 13:35:27.419 [opensc-pkcs11] card.c:597:sc_select_file: returning with: 0 (Success) 0xb7b1d6c0 13:35:27.419 [opensc-pkcs11] pkcs15-sec.c:68:select_key_file: returning with: 0 (Success) 0xb7b1d6c0 13:35:27.419 [opensc-pkcs11] sec.c:66:sc_set_security_env: called 0xb7b1d6c0 13:35:27.419 [opensc-pkcs11] apdu.c:525:sc_transmit_apdu: called 0xb7b1d6c0 13:35:27.419 [opensc-pkcs11] card.c:292:sc_lock: called 0xb7b1d6c0 13:35:27.419 [opensc-pkcs11] reader-pcsc.c:243:pcsc_transmit: reader 'ACS ACR38U 00 00' 0xb7b1d6c0 13:35:27.419 [opensc-pkcs11] apdu.c:184:sc_apdu_log: Outgoing APDU data [ 12 bytes] ===================================== 00 22 41 B6 07 80 01 02 81 02 EF D5 ."A......... ====================================================================== 0xb7b1d6c0 13:35:27.419 [opensc-pkcs11] reader-pcsc.c:176:pcsc_internal_transmit: called 0xb7b1d6c0 13:35:27.446 [opensc-pkcs11] apdu.c:184:sc_apdu_log: Incoming APDU data [ 2 bytes] ===================================== 90 00 .. ====================================================================== 0xb7b1d6c0 13:35:27.446 [opensc-pkcs11] card.c:330:sc_unlock: called 0xb7b1d6c0 13:35:27.446 [opensc-pkcs11] sec.c:70:sc_set_security_env: returning with: 0 (Success) 0xb7b1d6c0 13:35:27.446 [opensc-pkcs11] sec.c:52:sc_compute_signature: called 0xb7b1d6c0 13:35:27.446 [opensc-pkcs11] apdu.c:525:sc_transmit_apdu: called 0xb7b1d6c0 13:35:27.446 [opensc-pkcs11] card.c:292:sc_lock: called 0xb7b1d6c0 13:35:27.446 [opensc-pkcs11] reader-pcsc.c:243:pcsc_transmit: reader 'ACS ACR38U 00 00' 0xb7b1d6c0 13:35:27.446 [opensc-pkcs11] apdu.c:184:sc_apdu_log: Outgoing APDU data [ 8 bytes] ===================================== 00 2A 9E 9A 03 41 6C 61 .*...Ala ====================================================================== 0xb7b1d6c0 13:35:27.446 [opensc-pkcs11] reader-pcsc.c:176:pcsc_internal_transmit: called 0xb7b1d6c0 13:35:27.471 [opensc-pkcs11] apdu.c:184:sc_apdu_log: Incoming APDU data [ 2 bytes] ===================================== 69 82 i. ====================================================================== 0xb7b1d6c0 13:35:27.471 [opensc-pkcs11] card.c:330:sc_unlock: called 0xb7b1d6c0 13:35:27.471 [opensc-pkcs11] iso7816.c:103:iso7816_check_sw: Security status not satisfied 0xb7b1d6c0 13:35:27.471 [opensc-pkcs11] iso7816.c:820:iso7816_compute_signature: returning with: -1211 (Security status not satisfied) 0xb7b1d6c0 13:35:27.471 [opensc-pkcs11] sec.c:56:sc_compute_signature: returning with: -1211 (Security status not satisfied) 0xb7b1d6c0 13:35:27.471 [opensc-pkcs11] pkcs15-pin.c:553:sc_pkcs15_pincache_revalidate: called 0xb7b1d6c0 13:35:27.471 [opensc-pkcs11] pkcs15-pin.c:566:sc_pkcs15_pincache_revalidate: Could not find pin object for auth_id 01 0xb7b1d6c0 13:35:27.471 [opensc-pkcs11] card.c:330:sc_unlock: called 0xb7b1d6c0 13:35:27.471 [opensc-pkcs11] pkcs15-sec.c:380:sc_pkcs15_compute_signature: sc_compute_signature() failed: -1211 (Security status not satisfied) 0xb7b1d6c0 13:35:27.471 [opensc-pkcs11] card.c:330:sc_unlock: called 0xb7b1d6c0 13:35:27.471 [opensc-pkcs11] reader-pcsc.c:548:pcsc_unlock: called 0xb7b1d6c0 13:35:27.481 [opensc-pkcs11] framework-pkcs15.c:2721:pkcs15_prkey_sign: Sign complete. Result -1211. 0xb7b1d6c0 13:35:27.481 [opensc-pkcs11] misc.c:59:sc_to_cryptoki_error_common: libopensc return value: -1211 (Security status not satisfied) 0xb7b1d6c0 13:35:27.481 [opensc-pkcs11] pkcs11-object.c:635:C_Sign: C_Sign() = CKR_USER_NOT_LOGGED_IN
_______________________________________________ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel
