Re: [opensc-devel] Difference betwen pkcs15-init/pkcs11-tool generate key .

2009-11-18 Thread Viktor TARASOV
François Leblanc wrote: >> There are two targets: >> 1. If a PIN is entered via software, cache it in a single location, usable >> by all layers above libopensc by same mechanism >> 2. Allow to personalize a card with all PIN-s going through a pinpad. >> >> 1. is possible, but 2 via PKCS#11 might

Re: [opensc-devel] Difference betwen pkcs15-init/pkcs11-tool generate key .

2009-11-18 Thread François Leblanc
>There are two targets: >1. If a PIN is entered via software, cache it in a single location, usable by >all layers above libopensc by same mechanism >2. Allow to personalize a card with all PIN-s going through a pinpad. > >1. is possible, but 2 via PKCS#11 might be a problem, if a card requires

Re: [opensc-devel] Difference betwen pkcs15-init/pkcs11-tool generate key .

2009-11-18 Thread Viktor TARASOV
Martin Paljak wrote: On 18.11.2009, at 16:53, François Leblanc wrote: Hum, my first idea it's to add 'sc_pkcs15init_set_callbacks' somewhere in opensc-pkcs11.dll (in framework-pkcs15.c for example)... but like I'm not a specialist of pkcs11 I'd rather wait to have opinion of someone who kno

Re: [opensc-devel] Difference betwen pkcs15-init/pkcs11-tool generate key .

2009-11-18 Thread Martin Paljak
On 18.11.2009, at 16:53, François Leblanc wrote: > Hum, my first idea it's to add 'sc_pkcs15init_set_callbacks' somewhere in > > opensc-pkcs11.dll (in framework-pkcs15.c for example)... but like I'm not a > > specialist of pkcs11 I'd rather wait to have opinion of someone who know > > what he do

Re: [opensc-devel] Difference betwen pkcs15-init/pkcs11-tool generate key .

2009-11-18 Thread François Leblanc
Hum, my first idea it's to add 'sc_pkcs15init_set_callbacks' somewhere in opensc-pkcs11.dll (in framework-pkcs15.c for example)... but like I'm not a specialist of pkcs11 I'd rather wait to have opinion of someone who know what he do. So for the moment I hope pkcs11 expert to have a look. 'p

Re: [opensc-devel] Difference betwen pkcs15-init/pkcs11-tool generate key .

2009-11-18 Thread Aventra development
Hi! I have the same issue with 0.11.11 version.. just traced the problem to the same place. Any ideas what is wrong? Regards, Toni > -Original Message- > From: François Leblanc > > I try to use more pkcs11-tool since I guess pkcs11 will be the standard way > for use opensc > > and I ca

[opensc-devel] Difference betwen pkcs15-init/pkcs11-tool generate key .

2009-11-18 Thread François Leblanc
I try to use more pkcs11-tool since I guess pkcs11 will be the standard way for use opensc and I can't generate key with pkcs11. I notice that pkcs15-init call 'sc_pkcs15init_set_callbacks' and pkcs11-tool not and is why "do_get_and_verify_secret" fails later. Does someone use pkcs11-tool to

Re: [opensc-devel] ID of cryptographic objects

2009-11-18 Thread Aleksey Samsonov
Hello, Viktor TARASOV wrote: > Aleksey Samsonov wrote: >> Thanks, but some potencial memory leaks. See patch in attachment. > > You can apply this patch, if you think it should be. ok > As for me, there is no potential leaks -- I trust entirely the > sc_asn1_encode() . > > Agree, there is an

Re: [opensc-devel] pkcs11 trouble on 0.12.0-svn

2009-11-18 Thread François Leblanc
>for me the following works: > >./build/bin/pkcs11-tool --module ./build/lib/opensc-pkcs11.so -T >Available slots: >Slot 4 OmniKey CardMan 3121 01 00 >... >./build/bin/pkcs11-tool --module ./build/lib/opensc-pkcs11.so --slot 4 -l ->O >Please enter User PIN: >... Yes

Re: [opensc-devel] pkcs11 trouble on 0.12.0-svn

2009-11-18 Thread Viktor TARASOV
François Leblanc wrote: > Hi there, > > Does someone do commands like : > > pkcs11-tool -l -O > > It fails for me: > > error: PKCS11 function C_OpenSession failed: rv = CKR_TOKEN_NOT_PRESENT (0xe0) > > but if I do : > > pkcs11-tool -T > Available slots: > Slot 4 CEVGroup Software Reader 1

Re: [opensc-devel] pkcs11 trouble on 0.12.0-svn

2009-11-18 Thread Aktiv Co. Aleksey Samsonov
François Leblanc: > Hi there, Hi, > Does someone do commands like : > > pkcs11-tool -l -O > > It fails for me: > > error: PKCS11 function C_OpenSession failed: rv = CKR_TOKEN_NOT_PRESENT (0xe0) > > but if I do : > > pkcs11-tool -T > Available slots: > Slot 4 CEVGroup Software Reade

[opensc-devel] pkcs11 trouble on 0.12.0-svn

2009-11-18 Thread François Leblanc
Hi there, Does someone do commands like : pkcs11-tool -l -O It fails for me: error: PKCS11 function C_OpenSession failed: rv = CKR_TOKEN_NOT_PRESENT (0xe0) but if I do : pkcs11-tool -T Available slots: Slot 4 CEVGroup Software Reader 1 token label: westcos (User PIN) token ma

Re: [opensc-devel] cardos split-key

2009-11-18 Thread Vital Schonkeren
Hi Viktor, If you send me your address, I'll send you one for free ;-) Cardos 4.3B on a SLE66 320P (32k) Startkey "FF" and an empty pkcs15 structure. Regards, Vital _ ZETES BE- Rue de Strasbourg 3, 1130 Brussels ___ WWW.ZETE