Hi David. Sorry for the late reply; I was just searching my email for SafeSign 
and found yours. Coincidentally, I was testing a Crescendo C700 
(3B:DF:18:FF:81:31:FE:45:80:59:01:80:48:49:44:43:37:30:30:73:00:01:1B:33) that 
was also initialized with SafeSign Identity Client. I couldn't figure out how 
to get it to work with pkcs15-tool, but I implemented my own reader in Java. 
Here's what I found when poking around and comparing it to the MyEID card:

- It doesn't support select by relative or absolute path, only select by name 
(PKCS15 AID) and then select by file id.

- The PIN is 4 to 15-byte 00-padded.

- There's no private key file, so you don't need to select it or give the file 
id to to MSE Set command.

- MSE Set data was picky (84 01 00 80 01 02); reversing the fields 84 and 80 
caused it to fail.

I'm not sure how to modify pkcs15-tool to make it work, but I know it should be 
possible.

Yonathan
_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to