[opensc-devel] I get Card Not Present in Security Devices of FireFox browser?!

2012-11-14 Thread Rns Course
Hi all;

I have a Smart Card (SmartCafe Expert 3.2 72k with JavaCard 2.2.1 and GP 2.1.1).
I could compile Muscle Applet 0.9.11 source code with JavaCard kit 2.2.1 and 
jdk 1.4.1, the CardEdge.cap file was generated and then, load and install it on 
the card using GPShell 1.4.4 successfuly!

Now, I want to use (or integrate) this card in OpenSC to be used as a 
Cryptographic Token (Smart Card!)
First, I've initialized the applet by the command given on the OpenSC site:
(HERE) http://www.opensc-project.org/opensc/wiki/MuscleApplet
And everything was OK!
Then, I've downloaded and installed opensc-0.12.2.msi package (32  64 bit) on 
windows 7 (64 bit).
I've modified opensc.conf file by the card ATR and muscle as the card 
driver. 
Test with the command opensc-tool -n was OK and I saw MuscleApplet as the 
card driver in response!

Now, I want to test it with Mozilla FireFox and a CA server (in here, EJBCA) to 
generate a keypair in smart card (using muscle applet) and issue a certificate 
to be loaded on the card (by opensc pkcs11 library);

I do the following in FireFox :
Options Advanced Encryption Security Devices Load (opensc-pkcs11.dll in 
system32 or syswow64 folders).
After that, the driver of reader (in here, Omnikey CardMan3x21) is displayed in 
the list of Device Manager window.

BUT, when I click on it, the status is Not Present ! while the card is in the 
reader and detected by opensc-tool (-n option)!!!

How can I fix this problem?
Is there some settings that may be ignored in the procedure to have this java 
card ready to do Cryptographic and Authentication tasks?

Help me please, I've searched so much to solve this problem with NO RESULT

Thanks In Advance. ___
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Re: [opensc-devel] I get Card Not Present in Security Devices of FireFox browser?!

2012-11-14 Thread Douglas E. Engert


On 11/14/2012 9:48 AM, Rns Course wrote:
 Hi all;

 I have a Smart Card (SmartCafe Expert 3.2 72k with JavaCard 2.2.1 and GP 
 2.1.1).
 I could compile Muscle Applet 0.9.11 source code with JavaCard kit 2.2.1 and 
 jdk 1.4.1, the CardEdge.cap file was generated and then, load and install it 
 on the card using GPShell 1.4.4 successfuly!

 Now, I want to use (or integrate) this card in OpenSC to be used as a 
 Cryptographic Token (Smart Card!)
 First, I've initialized the applet by the command given on the OpenSC site:
 (HERE) http://www.opensc-project.org/opensc/wiki/MuscleApplet
 And everything was OK!
 Then, I've downloaded and installed opensc-0.12.2.msi package (32  64 bit) 
 on windows 7 (64 bit).
 I've modified opensc.conf file by the card ATR and muscle as the card 
 driver.
 Test with the command opensc-tool -n was OK and I saw MuscleApplet as the 
 card driver in response!

 Now, I want to test it with Mozilla FireFox and a CA server (in here, EJBCA) 
 to generate a keypair in smart card (using muscle applet) and issue a 
 certificate to be loaded on the card (by opensc
 pkcs11 library);

 I do the following in FireFox :
 Options Advanced Encryption Security Devices Load (opensc-pkcs11.dll in 
 system32 or syswow64 folders).
 After that, the driver of reader (in here, Omnikey CardMan3x21) is displayed 
 in the list of Device Manager window.

 BUT, when I click on it, the status is Not Present ! while the card is in 
 the reader and detected by opensc-tool (-n option)!!!

 How can I fix this problem?
 Is there some settings that may be ignored in the procedure to have this java 
 card ready to do Cryptographic and Authentication tasks?

 Help me please, I've searched so much to solve this problem with NO RESULT

In the opensc.conf set the debug = 8; and define a debug_file.

This might give a clue as to how far OpenSC has got with the card.

It could also be that if there is no certificate or key on the card,
Mozilla is not interested in using it.



 Thanks In Advance.





 ___
 opensc-devel mailing list
 opensc-devel@lists.opensc-project.org
 http://www.opensc-project.org/mailman/listinfo/opensc-devel


-- 

  Douglas E. Engert  deeng...@anl.gov
  Argonne National Laboratory
  9700 South Cass Avenue
  Argonne, Illinois  60439
  (630) 252-5444


___
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel


Re: [opensc-devel] state of the project?

2012-11-14 Thread Ludovic Rousseau
Hello,

2012/11/11 Viktor Tarasov viktor.tara...@gmail.com

 I propose to start migration the week 19-25.11 . I'll have more free time:
 - sources: all sources will migrate to github;


I just migrated the following projects to github on the OpenSC organization:
- libp11
- engine_pkcs11
- pam_p11
- pam_pkcs11

See https://github.com/OpenSC

I could not migrate:
- pkcs11-help. Something fails in the authors names conversion

I have not tried to migrate:
- OpenCT
- OpenSC-Java
Aren't these projects obsolete now?

I used svn2git [1] with the attached authors.txt file

- TRAC (wiki?): it seems that Peter Stuge proposed to do something with
 Trac.
 Peter, if you are here, can you take this part, or at least explain how it
 could be done, please?
 If no suggestions, Trac can also be hosted by 'opensc.fr' .


github provides a wiki and bug tracking system.
I have no objection to use trac at opensc.fr.

- mailling list: the same, if no other suggestions, I'm ready to
 install/migrate it to 'opensc.fr' platform.
 Would be nice if one of the experts explain what is the actions to follow
 for such migration.


opensc-project.org use mailman as the list manager and

# list_lists
5 matching mailing lists found:
Mailman - [no description available]
opensc-announce - A mailing list for OpenSC announcements
 opensc-commits - OpenSC source code commit notifications
   opensc-devel - Development of OpenSC and other smart card related
software
opensc-user - (INACTIVE) A mailing list for OpenSC users

I can retrieve the list of subscribers using list_members(8).
Vitkor, it looks like you do not have access to the
opensc-project.orgsystem. I can help you with the migration.

Viktor, I am not/no more a Unix system admin. But I volunteer to help if
needed. I think it is a good idea to have more than one (you?) system
administrator.

Andreas, the host available at opensc-project.org will disapear at the end
of the year 2012 [2]. The domain name has been transfered to Martin
Paljaka year ago [3]. But Martin is now missing. Can you transfer the
opensc-project.org domain name to Viktor or someone else?

Regards,

[1] https://github.com/nirvdrum/svn2git
[2] http://www.opensc-project.org/pipermail/opensc-devel
/2012-September/018377.html
[3] http://www.opensc-project.org/pipermail/opensc-devel
/2011-October/017312.html

-- 
 Dr. Ludovic Rousseau
ludovic.rousseau = Ludovic Rousseau ludovic.rousseau+git...@gmail.com
aj = Andreas Jellinghaus andr...@ionisiert.de
jonsito = Juan Antonio Martinez jons...@teleline.es
martin = Martin Paljak mar...@martinpaljak.net
alonbl = Alon Bar-Lev alon.bar...@gmail.com
nils = Nils Larsch nlar...@gmx.net
jps = Jean-Pierre Szikora jean-pierre.szik...@uclouvain.be
___
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

[opensc-devel] New SE (Security Element) Company Formed

2012-11-14 Thread Anders Rundgren
http://www.theregister.co.uk/2012/11/13/trustzone_company

Smart cards?  Don't think so.

Anders
___
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel


Re: [opensc-devel] state of the project?

2012-11-14 Thread Ludovic Rousseau
2012/11/14 Ludovic Rousseau ludovic.rouss...@gmail.com

 I could not migrate:
 - pkcs11-help. Something fails in the authors names conversion


I forked the github repository of Alon. pkcs11-helper is now available
under the OpenSC organization.
https://github.com/OpenSC/pkcs11-helper

 I have not tried to migrate:
 - OpenCT
 - OpenSC-Java
 Aren't these projects obsolete now?


I tried to convert OpenCT.
But I could not get the author correspondence. Some SVN revisions have no
author and confuse svn2git.

Bye

-- 
 Dr. Ludovic Rousseau
___
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Re: [opensc-devel] state of the project?

2012-11-14 Thread Alon Bar-Lev
On Wed, Nov 14, 2012 at 10:20 PM, Ludovic Rousseau
ludovic.rouss...@gmail.com wrote:


 2012/11/14 Ludovic Rousseau ludovic.rouss...@gmail.com

 I could not migrate:
 - pkcs11-help. Something fails in the authors names conversion


 I forked the github repository of Alon. pkcs11-helper is now available under 
 the OpenSC organization.
 https://github.com/OpenSC/pkcs11-helper

 I have not tried to migrate:
 - OpenCT
 - OpenSC-Java
 Aren't these projects obsolete now?


 I tried to convert OpenCT.
 But I could not get the author correspondence. Some SVN revisions have no 
 author and confuse svn2git.

I will prepare github for you to use.


 Bye

 --
  Dr. Ludovic Rousseau

 ___
 opensc-devel mailing list
 opensc-devel@lists.opensc-project.org
 http://www.opensc-project.org/mailman/listinfo/opensc-devel
___
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel


Re: [opensc-devel] state of the project?

2012-11-14 Thread Andreas Schwier
We are still maintaining a version of OpenSC-Java. If you migrate the
repo to GITHUB I will care for it.

Andreas

Am 14.11.2012 21:20, schrieb Ludovic Rousseau:

 2012/11/14 Ludovic Rousseau ludovic.rouss...@gmail.com
 mailto:ludovic.rouss...@gmail.com

 I could not migrate:
 - pkcs11-help. Something fails in the authors names conversion


 I forked the github repository of Alon. pkcs11-helper is now available
 under the OpenSC organization.
 https://github.com/OpenSC/pkcs11-helper

 I have not tried to migrate:
 - OpenCT
 - OpenSC-Java
 Aren't these projects obsolete now?


 I tried to convert OpenCT.
 But I could not get the author correspondence. Some SVN revisions have
 no author and confuse svn2git.

 Bye

 -- 
  Dr. Ludovic Rousseau


 ___
 opensc-devel mailing list
 opensc-devel@lists.opensc-project.org
 http://www.opensc-project.org/mailman/listinfo/opensc-devel


-- 

-CardContact Software  System Consulting
   |.## ##.|   Andreas Schwier
   |#   #|   Schülerweg 38
   |#   #|   32429 Minden, Germany
   |'## ##'|   Phone +49 571 56149
-http://www.cardcontact.de
 http://www.tscons.de
 http://www.openscdp.org

___
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel


Re: [opensc-devel] state of the project?

2012-11-14 Thread Ludovic Rousseau
2012/11/14 Andreas Schwier andreas.schw...@cardcontact.de

 We are still maintaining a version of OpenSC-Java. If you migrate the
 repo to GITHUB I will care for it.


Now available at https://github.com/OpenSC/OpenSC-Java

I pushed 3 branches:
- master
- pkcs11-0.2-branch
- pkcs11-test-0.2-branch

The latest commit in master is 4 years old.

Bye

-- 
 Dr. Ludovic Rousseau
___
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Re: [opensc-devel] New SE (Security Element) Company Formed

2012-11-14 Thread Peter Stuge
Anders Rundgren wrote:
 http://www.theregister.co.uk/2012/11/13/trustzone_company
 
 Smart cards?  Don't think so.

TrustZone isn't half bad hardware.

But I bet that the solution they come up with will still use exactly
the same old APDUs, with just a minimum bolted-on, in order to make
something that just barely works.


//Peter
___
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel


Re: [opensc-devel] New SE (Security Element) Company Formed

2012-11-14 Thread Andreas Schwier
Does the API matter anyway ?

No, it's the functionality the TEE provides: Generate, store, maintain
and use cryptographic material and do all kinds of risk management. And
these functions do not really require web service and overloaded APIs.
They require APIs that are consistent, simple to implement and simple to
be security evaluated. An ISO 7816-4 API is not an elegant API, but is
has been around for a long time, people understand it and it does what
it is supposed to do.

I would love to see a CC certified TEE that has an embedded JavaCard VM
with lots of memory and sufficient processing power.

Andreas

Am 15.11.2012 00:13, schrieb Peter Stuge:
 Anders Rundgren wrote:
 http://www.theregister.co.uk/2012/11/13/trustzone_company

 Smart cards?  Don't think so.
 TrustZone isn't half bad hardware.

 But I bet that the solution they come up with will still use exactly
 the same old APDUs, with just a minimum bolted-on, in order to make
 something that just barely works.


 //Peter
 ___
 opensc-devel mailing list
 opensc-devel@lists.opensc-project.org
 http://www.opensc-project.org/mailman/listinfo/opensc-devel


-- 

-CardContact Software  System Consulting
   |.## ##.|   Andreas Schwier
   |#   #|   Schülerweg 38
   |#   #|   32429 Minden, Germany
   |'## ##'|   Phone +49 571 56149
-http://www.cardcontact.de
 http://www.tscons.de
 http://www.openscdp.org

___
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel