Re: [opensc-devel] Call for review of the ePass2003 driver
On 12/16/2011 11:35 AM, Jean-Michel Pouré - GOOZE wrote: > Dear Friends, > > Just a quick note that the ePass2003 is now available from GOOZE: > http://www.gooze.eu/epass-2003 > > As usual, we are happy to donate free tokens to OpenSC developers > willing to test the ePass 2003: > http://www.gooze.eu/feitian-epass-2003-free-software-developer-kit > > Some of you have already received free tokens. > > To compile and test the ePass2003 driver: > $ git clone git://github.com/entersafe/OpenSC.git > $ cd OpenSC > $ git branch testing origin/epass2003 > $ git checkout epass2003 > $ ./bootstrap > $ make; make install > > We would be happy to hear from you and integrate the epass2003 driver > into OpenSC core source code. Using the epass2003 token you sent a few weeks ago, and the github source with branch epass2003 and the documents on the CD, I was able to build OpenSC on Solaris 10. I generated a 2048 bit key, and used the OpenSSL engine to generate a certificate request. I was then able to get our Windows enterprise CA to sign the request, and then loaded the certificate on the token. The token works with the pam_krb5 and MIT PKINIT Kerberos to logon to the workstation using Windows AD as the KDC. Next thing to try is the minidriver on Windows with smart card logon, maybe after the holidays. Since Solaris does not support libusb-1.0, I was able to use older pcscd-1.6.1 and ccid-1.3.13 using the reader/supported_readers.txt from ccid-1.4.5. Looks good so far! Thanks for the token to test with. > > Kind regards, > > > > ___ > opensc-devel mailing list > opensc-devel@lists.opensc-project.org > http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel
Re: [opensc-devel] Slowness opening card
On 21/12/2011 19:59, Peter Stuge wrote: > NdK wrote: >> But I noticed that lastly every command is sluggish. > .. >> Is there something I should check or some more debugging I should enable? > > Probably libusb bug #56 which has been fixed but not available > everywhere just yet. What distribution do you use? Mandriva Cooker. I didn't see the error -121 in dmesg that IIUC should be symptom of libusb bug 56... Anyway I tested replacing my libusb and it seems it resolves the issue. Conclusion: test w/ fixed libusb anyway :) BYtE, Diego. ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel
Re: [opensc-devel] Slowness opening card
NdK wrote: > But I noticed that lastly every command is sluggish. .. > Is there something I should check or some more debugging I should enable? Probably libusb bug #56 which has been fixed but not available everywhere just yet. What distribution do you use? //Peter ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel
[opensc-devel] Slowness opening card
Hi all. Being on vacation I could finally resume my experiments. But I noticed that lastly every command is sluggish. Running "pcscd -f -d" I could pin down the slow op to the SCardConnect: 0028 Card ATR: 3B F5 18 00 00 81 31 FE 45 4D 79 45 49 44 9A 0007 winscard.c:328:SCardConnect() powerState: POWER_STATE_INUSE 0006 prothandler.c:128:PHSetProtocol() Attempting PTS to T=1 0036 ifdhandler.c:695:IFDHSetProtocolParameters() protocol T=1, usb:08e6/3437:libusb-1.0:7:2 (lun: 0) 0009 ifdhandler.c:1863:extra_egt() Extra EGT patch applied winscard.c:406:SCardConnect() Active Protocol: T=1 0051 winscard.c:426:SCardConnect() hCard Identity: 12663 0010 winscard_svc.c:443:ContextThread() CONNECT rv=0x0 for client 4 0152 winscard_svc.c:314:ContextThread() Received command: CONTROL from client 4 It's obviously the line with all those 9. But that's not fixed. On another run it hung on 60079903 winscard_svc.c:598:ContextThread() TRANSMIT rv=0x0 for client 4 [maybe that could related to having opensc-pkcs11.so loaded both in FF and TB, but slowness remains]. $ time pkcs15-tool --list-pins Using reader with a card: Gemalto GemPC Twin 00 00 PIN [Security Officer PIN] Object Flags : [0x3], private, modifiable ID : ff Flags : [0xB0], initialized, needs-padding, soPin Length : min_len:4, max_len:8, stored_len:8 Pad char : 0xFF Reference : 3 Type : ascii-numeric PIN [Card Auth] Object Flags : [0x3], private, modifiable ID : 01 Flags : [0x30], initialized, needs-padding Length : min_len:4, max_len:8, stored_len:8 Pad char : 0xFF Reference : 1 Type : ascii-numeric PIN [User Auth] Object Flags : [0x3], private, modifiable ID : 02 Flags : [0x30], initialized, needs-padding Length : min_len:4, max_len:8, stored_len:8 Pad char : 0xFF Reference : 2 Type : ascii-numeric real4m0.982s user0m0.000s sys 0m0.004s And attached is the full output of pcscd for that run: I'm now using opensc-0.12.1 and lib64pcsclite-1.6.6 (packages from Mandriva Cooker). Same card (Aventra MyEID) and same reader (Gemalto GemPC Twin) worked OK some months ago (with 0.12.0). Is there something I should check or some more debugging I should enable? BYtE, Diego. pcscd-slow.log.bz2 Description: application/bzip ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel
