Duh, I see you have 32 and 64 bit msi files. Since I was using 32 bit firefox and Thunderbird, I installed the 32 bit version on W7 64. It install the clients in \Program Files (x86)\... but not the Windows\system32\opensc-pkcs11.dll
If I then install the 64 bit msi, it installs the \Program Files\OpenSC\... and installs Windows\system32\opensc-pkcs11.dll. Is the intent that the 64 bit msi install 64 bit tools, and opensc.dll and the 32 bit opensc-pkcs11.dll? Is there a 64 bit opensc-pkcs11.dll? Firefox 8.0.1 works to a web site. Thunderbird 13.0.1 complains about the signing certificate usage, but appears to read the certificates, and TB says the certificate chain is valid and all the CA certs are listed as trusted for signing e-mail. This sounds like a Thunderbird bug. Will have to look some more. but it looks like OpenSC is working. I was able to sign using TB 13.0.1 on Solaris using a test account. On 9/24/2012 2:43 PM, Douglas E. Engert wrote: > > > On 9/24/2012 12:52 PM, Viktor Tarasov wrote: >> On Wed, Sep 19, 2012 at 11:54 PM, Douglas E. Engert <deeng...@anl.gov >> <mailto:deeng...@anl.gov>> wrote: >> >> I have been testing 0.13.0-pre1 from tarball listed below. >> >> Builds on Solaris. >> >> works with MIT Kerberos PKINIT and pam_krb5 to login to AD as the KDC. >> >> Can sign Email using thunderbird 13.0.1. >> >> The pkcs11-tool -derive using ECDH works using a PIV test card from NIST >> and a card I created. (i.e. using the key frome a card and the cert from >> the other card, will produce the same secret key.) >> >> >> Ok, thanks for the testing. >> >> In 0.13.0-pre1 there is the bug that concerns the using of non-initialized >> OID data. >> My non-regression tests were done with the current (*d525ca97e3*) 'master' >> version: >> >> For the OpenSC installed on Linux from tarball >> the following tests of the where done using the pkcs15 and pkcs11 tools, >> with the cards 'CardOS v4.3B', 'SetCOS 4.4.1 B', 'Athena', 'Aventra' and >> 'Feitian': >> - erase card (pkcs15-init -E); >> - initialize (ex. pkcs15-init -C --label "IDX-SCM" -P --auth-id 53434D >> --so-pin "12345678" --so-puk "123456" --pin "999999" --puk "888888"); >> - generate RSA 1024/2048 (depending on card); >> - import PKCS#12 with user and CA certificates; >> - get public key from imported or generated key; >> - sign data using pkcs15-crypt and pkcs11-tool and verify it with openssl; >> - decrypt the data encypted by openssl; >> >> Using Firefox 12.0 and Thunderbird 15.0.1, on Vista, with IAS/ECC card and >> OpenSC installed from MSI: >> - generate key and sign certificate request; >> - import certificate; >> - authenticate to access protected web page. >> - import PKCS#12; >> - sign mail; >> - decrypt mail. >> >> As for me, still to test are minidriver (IE and outlook), smartcard logon >> (windows) and SM (for the cards that support it). >> >> Do you have other suggestions for the non-regression tests? > > If you have a Windows build, I could test PKCS#11 on Windows 7 with Firefox > and Thinderbird. > > >> >> Kind regards, >> Viktor. >> >> >> On 9/17/2012 3:00 PM, Viktor Tarasov wrote: >> > Hello, >> > >> > Le 15/09/2012 16:52, Kalev Lember a écrit : >> >> On 09/06/2012 08:06 PM, Viktor Tarasov wrote: >> >>> Hello, >> >>> >> >>> current github 'staging' is tagged as v0.13.0-pre1. >> >>> >> >>> If no objections, I will merge this branch into github 'master' -- >> it will be base version to test >> >>> and to prepare the coming release candidate. >> >> Very good idea. I think it makes a lot of sense to have just one >> >> 'master' branch for development; this is what people coming over >> from >> >> other projects tend to expect. >> > >> > >> > 'Master' and 'staging' are actually synchronized and for the new >> pull requests I propose to create them relative to the 'master' branch. >> > Until the end of this release the pull requests to 'staging' are >> also accepted. >> > >> > The tag name 'v0.13.0-pre1' has been changed (sorry) to '0.13.0pre1' >> -- still cannot understand which common set of characters >> > could be used for the release-version/tag-name to satisfy 'git', >> 'obs', 'dpkg-build', ... >> > >> > Commits to 'master' and new tags trigger the jenkins jobs of build, >> packaging and some rudimentary test of package and unit tests (for Suse). >> > https://opensc.fr/jenkins/view/Open >> <https://opensc.fr/jenkins/view/OpenSC-release/>SC-release/ >> <https://opensc.fr/jenkins/view/OpenSC-release/> >> > >> > The resulting packages are transfered to 'download' part of the >> opensc-project.org <http://opensc-project.org> file server: >> > - commits to >> > http://www.opensc-project.org/downloads/projects/opensc/nightly/ >> > - releases to >> > http://www.opensc-project.org/downloads/projects/opensc/releases/ >> > >> > >> > For a while there are only source tarballs, MSIs for x32 and x64 and >> rpm i586 for opensSuSE 12.1 . >> > Hope that rapidly the building of releases packages for some >> debian/ubuntu distributions will be connected. >> > >> > It would be nice if you could look/test the tarball or packages of >> the release 0.13.0pre1. >> > Your remarks, proposals, contributions are heartily welcome. >> > >> > Kind regards, >> > Viktor. >> > _______________________________________________ >> > opensc-devel mailing list >> > opensc-devel@lists.opensc-project.org >> <mailto:opensc-devel@lists.opensc-project.org> >> > http://www.opensc-project.org/mailman/listinfo/opensc-devel >> > >> > >> >> -- >> >> Douglas E. Engert <deeng...@anl.gov <mailto:deeng...@anl.gov>> >> Argonne National Laboratory >> 9700 South Cass Avenue >> Argonne, Illinois 60439 >> (630) 252-5444 <tel:%28630%29%20252-5444> >> >> >> _______________________________________________ >> opensc-devel mailing list >> opensc-devel@lists.opensc-project.org >> <mailto:opensc-devel@lists.opensc-project.org> >> http://www.opensc-project.org/mailman/listinfo/opensc-devel >> >> > -- Douglas E. Engert <deeng...@anl.gov> Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 _______________________________________________ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel
