Re: [opensc-devel] new server hoster and adminstrator for opensc-project.org required

2012-09-18 Thread Jean-Michel Pouré - GOOZE
Dear all,

 wouldn't it be better to move the remaining parts of the project to
 github ?

Sorry if I did not catch this message before.
I volunteer to take part in this project with the community.

Migrating the platform would allow to clarify the community goals and
participants. As written previously:

* Community

We need to extend the list of core hackers, to define the community and
avoid that one person blocks or takes control of the hosting
environment.

* Cheap hosting

Host a minimal web server with OpenSC page. I suggest a cheap
http://www.kimsufi.com/fr/

* GIThub

Migrate to GIThub the code repositories. Code issues and pull requests
are enough to manage bugs and evolutions, provided that there is a
clearly defined community in charge of GIThub main projects.

* Build-farm

Have separate builds farms coordinated by Jenkins. This is already the
case of our build farm (Viktor and I). And we proved to run the farm
24x365. We run the farm on real computers. We can also provide backup.

We recently bought a 12-core supermicro computer, to add to the build
farm. We have received the motherboard, casing and processors and we
still need the memory (around 96 Gb). This is meant to be a virtual
server replacing my various computers in the build farm.

It is also nice to have build farms running behind firewalls with very
limited access to Internet using vlans.

I suggest that we start with the political issues first, to design an
informal community. Then we can host OpenSC safely on GIThub and start
the migration.

Kind regards,
Jean-Michel POURE
-- 

  GOOZE - http://www.gooze.eu
   High quality cryptographic tools 
  for GNU/Linux, Mac OS X and Windows
 including the FEITIAN PKI card
 POURE SASU - 17 rue Saint Jacques - 95160 Montmorency - France
   Tel : +33 (0)9 72 13 53 90 - Mobile : +33 (0)6 51 99 37 90
 Registry: FR 527 672 448 00018 - VAT: FR54527672448
  ID PGP/GPG: 084F2584


smime.p7s
Description: S/MIME cryptographic signature
___
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

[opensc-devel] Help compiling Mac OS 10.7, 10.8 and 10.9 on ONE machine

2012-09-18 Thread Jean-Michel Pouré - GOOZE
Hello,

The build farm has one Mac OS X machine running compilation scripts:
https://opensc.fr/jenkins/computer/farm-macosx-lion/

This machine also has several systems installed on different partitions:
Mac OS X Snow Leopard (10.7), Lion (10.8) and Mountain Lion (10.9). Each
time we need a new installer for 10.7 I just reboot the machine, which
is tedious. We also need installers for 10.9.
So my question is: do you know how to install various development kits
(10.7, 10.8 and 10.9) on one system (10.9) to compile to all targets at
once? Is that possible by design in OpenSC and Mac OS X? I tried Google
but could not achieve this.

Another solution would be to invest into cheap Mac OS X machines on eBay
(Mac mini core solo), which can be found around 150€ each.

I don't want to loose my time and will choose the easiest solution.

Can anyone help me compile to various environments?

Kind regards,
Jean-Michel

-- 
  Jean-Michel Pouré - Gooze - http://www.gooze.eu



smime.p7s
Description: S/MIME cryptographic signature
___
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Re: [opensc-devel] Help compiling Mac OS 10.7, 10.8 and 10.9 on ONE machine

2012-09-18 Thread Ludovic Rousseau
2012/9/18 Jean-Michel Pouré - GOOZE jmpo...@gooze.eu:
 Hello,

Hi,

 The build farm has one Mac OS X machine running compilation scripts:
 https://opensc.fr/jenkins/computer/farm-macosx-lion/

 This machine also has several systems installed on different partitions:
 Mac OS X Snow Leopard (10.7), Lion (10.8) and Mountain Lion (10.9). Each
 time we need a new installer for 10.7 I just reboot the machine, which
 is tedious. We also need installers for 10.9.
 So my question is: do you know how to install various development kits
 (10.7, 10.8 and 10.9) on one system (10.9) to compile to all targets at
 once? Is that possible by design in OpenSC and Mac OS X? I tried Google
 but could not achieve this.

You can install Mac OS X (client) inside VitualBox [1]. It is
technically possible. The legal aspect is another problem.
I only tried using VirtualBox on a Mac. Maybe that is even possible
using VirtualBox on a GNU/Linux machine.

 Another solution would be to invest into cheap Mac OS X machines on eBay
 (Mac mini core solo), which can be found around 150€ each.

That may be the easiest solution. But not the cheapest one (buy the
computers and pay for the electricity bill).

Bye

[1] https://www.virtualbox.org/wiki/Guest_OSes

-- 
 Dr. Ludovic Rousseau
___
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Re: [opensc-devel] Help compiling Mac OS 10.7, 10.8 and 10.9 on ONE machine

2012-09-18 Thread Jean-Michel Pouré - GOOZE
Dear Ludovic,

 You can install Mac OS X (client) inside VitualBox [1]. It is
 technically possible. The legal aspect is another problem.
 I only tried using VirtualBox on a Mac. Maybe that is even possible
 using VirtualBox on a GNU/Linux machine.

I tried that already and could not use VirtualBox because it only allows
Max OS X Server running as guest. I also invested in a VMware licence
and it never worked for the same reasons.

 That may be the easiest solution. But not the cheapest one (buy the
 computers and pay for the electricity bill). 

I am quite busy these last days and I already spent DAYs trying to
compile on a single Mac. There is too little information on the Net and
I don't know if some parts of Mac OS X are needed to make a successful
compilation. Apple says it is possible to install several development
kits on a single machine. Would it work for OpenSC in your opinion?

Kind regards,
-- 
  Jean-Michel Pouré - Gooze - http://www.gooze.eu


smime.p7s
Description: S/MIME cryptographic signature
___
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Re: [opensc-devel] Help compiling Mac OS 10.7, 10.8 and 10.9 on ONE machine

2012-09-18 Thread Emmanuel Dreyfus
On Tue, Sep 18, 2012 at 11:00:41AM +0200, Jean-Michel Pouré - GOOZE wrote:
 I am quite busy these last days and I already spent DAYs trying to
 compile on a single Mac

I spent quite some time to build pcscd and opensc on OS X.5. I got all
the binaries working, opensc is able to talk to the card, however I never
managed to actually use it with ssh-agent. I gave up and never sent
the patches for review, but if you are interested, I have patches for
building:
opensc-0.12.2
pcsc-lite-1.7.4
openssh-5.9p1

-- 
Emmanuel Dreyfus
m...@netbsd.org
___
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel


Re: [opensc-devel] Help compiling Mac OS 10.7, 10.8 and 10.9 on ONE machine

2012-09-18 Thread Jean-Michel Pouré - GOOZE
Le mardi 18 septembre 2012 à 09:16 +, Emmanuel Dreyfus a écrit :
 
 I spent quite some time to build pcscd and opensc on OS X.5. I got all
 the binaries working, opensc is able to talk to the card, however I
 never
 managed to actually use it with ssh-agent. I gave up and never sent
 the patches for review, but if you are interested, I have patches for
 building:
 opensc-0.12.2
 pcsc-lite-1.7.4
 openssh-5.9p1 

Which OS X are talking about? IMHO it already works:
https://opensc.fr/jenkins/job/OpenSC-pkg-MacOSX-10.6/

I just want to compile for several targets (10.6, 10.7 and 10.8) on a
single Mac OS X Moutain Lion machine without rebooting.

Kind regards,
-- 
  Jean-Michel Pouré - Gooze - http://www.gooze.eu


smime.p7s
Description: S/MIME cryptographic signature
___
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

[opensc-devel] Creating a new PKCS#15 profile

2012-09-18 Thread Mathias Tausig
Hy!

I have a smartcard which is initialized with a signature application. Now I 
want to add a PKCS#15 application to the card, which references that data.

I have started to add a new DF with some basic information according to the 
PKCS#15 specifications, so far I have an Object directory file and a 
certificate 
directory file. I tried to access the card with pkcs15-tool --dump, but I got 
th error message:

PKCS#15 binding failed: Unsupported card

I assume, that I somehow have to create a new profile for the card. Is this 
correct? Is there some guidance, how this is done?

cheers
Mathias
___
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel


Re: [opensc-devel] Creating a new PKCS#15 profile

2012-09-18 Thread Andreas Schwier (ML)
Dear Matthias,

what does opensc-tool -n report for this card ?

Did you check if the card OS is supported by OpenSC ?

Andreas


Am 18.09.2012 15:43, schrieb Mathias Tausig:
 Hy!

 I have a smartcard which is initialized with a signature application. Now I 
 want to add a PKCS#15 application to the card, which references that data.

 I have started to add a new DF with some basic information according to the 
 PKCS#15 specifications, so far I have an Object directory file and a 
 certificate 
 directory file. I tried to access the card with pkcs15-tool --dump, but I got 
 th error message:

 PKCS#15 binding failed: Unsupported card

 I assume, that I somehow have to create a new profile for the card. Is this 
 correct? Is there some guidance, how this is done?

 cheers
 Mathias
 ___
 opensc-devel mailing list
 opensc-devel@lists.opensc-project.org
 http://www.opensc-project.org/mailman/listinfo/opensc-devel


-- 

-CardContact Software  System Consulting
   |.## ##.|   Andreas Schwier
   |#   #|   Schülerweg 38
   |#   #|   32429 Minden, Germany
   |'## ##'|   Phone +49 171 8334920
-http://www.cardcontact.de
 http://www.tscons.de
 http://www.openscdp.org

___
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel


Re: [opensc-devel] Creating a new PKCS#15 profile

2012-09-18 Thread Mathias Tausig
On Tuesday 18. September 2012 16:21:29 Andreas Schwier wrote:
 Dear Matthias,
 
 what does opensc-tool -n report for this card ?
 
The output is CardOS M4, the card is a CardOS v4.4 card.

 Did you check if the card OS is supported by OpenSC ?
 
 Andreas
 
 Am 18.09.2012 15:43, schrieb Mathias Tausig:
  Hy!
  
  I have a smartcard which is initialized with a signature application. Now
  I
  want to add a PKCS#15 application to the card, which references that data.
  
  I have started to add a new DF with some basic information according to
  the
  PKCS#15 specifications, so far I have an Object directory file and a
  certificate directory file. I tried to access the card with pkcs15-tool
  --dump, but I got th error message:
  
  PKCS#15 binding failed: Unsupported card
  
  I assume, that I somehow have to create a new profile for the card. Is
  this
  correct? Is there some guidance, how this is done?
  
  cheers
  Mathias
  ___
  opensc-devel mailing list
  opensc-devel@lists.opensc-project.org
  http://www.opensc-project.org/mailman/listinfo/opensc-devel
___
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel


[opensc-devel] issue with sc_decompress() call when run on Big Endian OS

2012-09-18 Thread Puneet Khunteta
Hello,

I observed that when i use a sc_decompress() call on a Big Endian OS (
Linux with Arm Processor), i got a error code return -1400.
Where as it works perfectly for the window ( Little Endian) OS.
I have used the same certificate file to de-compress on both devices.

 nRet = sc_decompress(outbuff, (size_t *)nOutBuffLen, Inbuff, nInBuffLen,
COMPRESSION_AUTO);

nRet = -1400 ( for Big Endian)
nRet = 0( for little Endian)

A quick help will be appreciate.

Regards
___
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Re: [opensc-devel] issue with sc_decompress() call when run on Big Endian OS

2012-09-18 Thread Ludovic Rousseau
2012/9/18 Puneet Khunteta khunteta.pun...@gmail.com:
 Hello,

Hi,

 I observed that when i use a sc_decompress() call on a Big Endian OS ( Linux
 with Arm Processor), i got a error code return -1400.
 Where as it works perfectly for the window ( Little Endian) OS.
 I have used the same certificate file to de-compress on both devices.

  nRet = sc_decompress(outbuff, (size_t *)nOutBuffLen, Inbuff, nInBuffLen,
 COMPRESSION_AUTO);

I don't know what the type of nOutBuffLen is but it is very dangerous
to cast pointers.
If nOutBuffLen has not the same size as size_t your code is bogus.

Bye

-- 
 Dr. Ludovic Rousseau
___
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel


Re: [opensc-devel] issue with sc_decompress() call when run on Big Endian OS

2012-09-18 Thread Douglas E. Engert

On 9/18/2012 10:53 AM, Puneet Khunteta wrote:
 Hello,

 I observed that when i use a sc_decompress() call on a Big Endian OS ( Linux 
 with Arm Processor), i got a error code return -1400.
 Where as it works perfectly for the window ( Little Endian) OS.
 I have used the same certificate file to de-compress on both devices.

   nRet = sc_decompress(outbuff, (size_t *)nOutBuffLen, Inbuff, nInBuffLen, 
 COMPRESSION_AUTO);

Why do you need  (size_t *) above?
What is nOutBuffLen?


 nRet = -1400 ( for Big Endian)
 nRet = 0( for little Endian)

 A quick help will be appreciate.

Can you use COMPRESSION_GZIP or COMPRESSION_ZLIB to test if this
is a problem with GZIP , ZLIB or with the detect_method routine?

Do you want to use the sc_decompress_alloc?

The only place I see sc_decompress used in OpenSC is used in in card-piv.c
and that uses gzip. It works on Solaris sparc, a big endian machine.


 Regards


 ___
 opensc-devel mailing list
 opensc-devel@lists.opensc-project.org
 http://www.opensc-project.org/mailman/listinfo/opensc-devel


-- 

  Douglas E. Engert  deeng...@anl.gov
  Argonne National Laboratory
  9700 South Cass Avenue
  Argonne, Illinois  60439
  (630) 252-5444


___
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel