Il 23/02/2011 21:19, Martin Paljak ha scritto:
>> But when I try to use it, I get:
>> -8<--
>> $ ssh otheruser@myhost
>> Enter PIN for 'MyEID (User Auth)':
>> C_Sign failed: 257
> This means: #define CKR_USER_NOT_LOGGED_IN(0x101UL)
> Having OpenSC debug.log would be useful - is the right PIN verified before as
> it should be.
Today I could do some more testing.
I tried nearly step-by-step, adding complexity every time it worked (as
expected or not).
So, clean start (the script I'm using):
-8<--
pkcs15-init -E
pkcs15-init -C --pin --puk --so-pin $SOPIN --so-puk $SOPUK -l
"NdK card"
pkcs15-init -P -a 1 --pin $PIN1 --puk $PUK1 --so-pin $SOPIN -l "Card Auth"
#pkcs15-init -P -a 2 --pin $PIN2 --puk $PUK2 --so-pin $SOPIN -l "User Auth"
pkcs15-init -F
pkcs15-init -G rsa/2048 --insecure --id 1000 -u digitalSignature -l
"SSH:ndk" --pin $PIN1
-8<--
In this scenario ssh works, but *asks for CHV1* ! ???
But if I add another PIN (uncommenting the second -P ), I get again that
"not logged in" error, even if key is still created with --insecure !
Maybe I'm triggering some untested path?
BYtE,
Diego.
___
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel
