Re: [opensc-devel] [opensc-commits] svn openct changed [1101] eToken now supports the new event interface

2009-01-20 Thread Alon Bar-Lev
On 1/20/09, Ludovic Rousseau wrote: > > +static int et_event(ifd_reader_t * reader, int *status, size_t > status_size) > > +{ > > + (void)reader; > > + (void)status; > > + (void)status_size; > > What is the code above supposed to do? > It just looks like void code for me.

Re: [opensc-devel] Mailing list problem? (Re: hide_empty_tokens)

2009-01-20 Thread Andreas Jellinghaus
Am Dienstag 20 Januar 2009 10:13:58 schrieb Ludovic Rousseau: > 2009/1/19 Alon Bar-Lev : > > On 1/19/09, Martin Paljak wrote: > >> BTW, am I the only one having problems with opensc-commit list? I have > >> received only 2 mails from it in the past week. > > > > I also saldom receive messages. >

[opensc-devel] Mailing list problem? (Re: hide_empty_tokens)

2009-01-20 Thread Ludovic Rousseau
2009/1/19 Alon Bar-Lev : > On 1/19/09, Martin Paljak wrote: >> BTW, am I the only one having problems with opensc-commit list? I have >> received only 2 mails from it in the past week. > > I also saldom receive messages. Me too. I can see many messages for January on the list archive at [1] bu

Re: [opensc-devel] hide_empty_tokens

2009-01-20 Thread Andreas Jellinghaus
Am Montag 19 Januar 2009 13:38:06 schrieb Martin Paljak: > BTW, am I the only one having problems with opensc-commit list? I have > received only 2 mails from it in the past week. no idea, I did a test commit, and it shows up in the web archive. also mails to all subscribers are in the postfix mai

Re: [opensc-devel] openct - removing USB reader polling

2009-01-20 Thread Chaskiel Grundman
Chaskiel, please look at the ccid_open_usb(), and try to help me figure out why I had to add ifd_sysdep_usb_reset() in order to make the reader respond to the initial status query. It appears that ccid_card_status always fails if it has to probe the device and no card is present. That's because

[opensc-devel] Multislot readers?

2009-01-20 Thread Martin Paljak
Does anyone know of any real life readers that have multiple slots and where the OpenSC driver (ctapi most probably) would show them as slots, not as different readers? http://www.opensc-project.org/opensc/changeset/2111 -- Martin Paljak http://martin.paljak.pri.ee GSM:+3725156495 __

Re: [opensc-devel] APPLE PC/SC bug workaround

2009-01-20 Thread Martin Paljak
Hey! On Sat, Jan 3, 2009 at 4:54 PM, Alon Bar-Lev wrote: > Reading the source I found that you added some code to workaround > apple bug [1][2]. > > Can you please move it into reader-pcsc.c, as this has nothing to do > with the generic interface of opensc. I would have done so but I think > that

Re: [opensc-devel] New option v2_20_mode

2009-01-20 Thread Alon Bar-Lev
Hello, I don't understand. OpenSC PKCS#11 modules *ALWAYS* allocate specific number of virtual slots. The plug&play just link between virtual slot and real slot. So it all works with Firefox 2.X and Firefox 3.X, I checked it now again with Firefox 3.X. I am not happy with this implementation but

Re: [opensc-devel] hide_empty_tokens

2009-01-20 Thread Alon Bar-Lev
On 1/19/09, Martin Paljak wrote: > On Mon, Jan 19, 2009 at 3:00 PM, Alon Bar-Lev wrote: > >> Tried it as well. hide_empty_tokens only matters for PKCS#15-init > >> compatible cards and does not apply to read-only PKCS#15 emulated > >> cards. > > > > Are you sure that emulated PKCS#15 card

Re: [opensc-devel] openct - removing USB reader polling

2009-01-20 Thread Alon Bar-Lev
Chaskiel, While we at it... Is there any way we can turn off card power consumption if it is not used? In CCID spec there is power off command... And I think we can banifit some battery minutes... Thanks! ___ opensc-devel mailing list opensc-devel@lists

Re: [opensc-devel] openct - removing USB reader polling

2009-01-20 Thread Chaskiel Grundman
I seem to have not sent this yesteday when I composed it > Please notice that the reset is before any other command... Yes, I did see that. > Debug: ccid_command: sending: 65 00 00 00 00 00 00 00 00 00 > Debug: usb_send: usb send to=x02 > Debug: usb_send: send 65 00 00 00 00 00 00 00 00 00 >

Re: [opensc-devel] openct - removing USB reader polling

2009-01-20 Thread Alon Bar-Lev
On 12/31/08, Alon Bar-Lev wrote: > > another GetSlotStatus message. The attached patch catches this specific > > error and interprets it correctly. (Actually, there are two patches. One > > takes the IFD_ERROR_NO_CARD error from ccid_command and asserts that means > > the card is absent. The o

Re: [opensc-devel] APPLE PC/SC bug workaround

2009-01-20 Thread Martin Paljak
On Fri, Jan 16, 2009 at 9:42 PM, Martin Paljak wrote: > not set, is profile_dir. The included patch creates a #define to get > rid of it but I really don't get the "eval eval eval eval" thing :) > I'm sure there is a more correct way of doing it, as currently > pkgdatadir and full_pkgdatadir have

Re: [opensc-devel] APPLE PC/SC bug workaround

2009-01-20 Thread Martin Paljak
On Fri, Jan 16, 2009 at 8:00 PM, Alon Bar-Lev wrote: > I would prefer you discuss changing defaults and behavior in the list > before you commit anything. These are not functional behavior changes but "common sense" fixes to things that currently don't behave as they were first implemented. Please

Re: [opensc-devel] APPLE PC/SC bug workaround

2009-01-20 Thread Alon Bar-Lev
On 1/16/09, Martin Paljak wrote: > On Fri, Jan 16, 2009 at 8:00 PM, Alon Bar-Lev wrote: > > I would prefer you discuss changing defaults and behavior in the list > > before you commit anything. > > These are not functional behavior changes but "common sense" fixes to > things that currently do

Re: [opensc-devel] preview for opensc 0.11.7

2009-01-20 Thread Alon Bar-Lev
On 12/31/08, Jeffrey Hutzelman wrote: > > * private data objects were not implemented securely: the > > old code stored them with a flag "ask for the pin", but did nothing to > > protect the data, thus everyone can read it. The new code sets the > > access control right for such data objects

[opensc-devel] Marx CrypToken MX2048-JCOP

2009-01-20 Thread Peter Stuge
http://www.cryptoken.com/en/products/hardware/ct2000.php Anyone know about this product? Claims Linux support. //Peter ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel

Re: [opensc-devel] lets enable lock_login by default

2009-01-20 Thread Alon Bar-Lev
On 1/1/09, Martin Paljak wrote: > > %% Here you can see that two applications may sign, even one > > application may delete the key at the same time the other application > > sign using it... How can it be if both applications cannot > > authenticate at the same time? > > > > I'm not just

Re: [opensc-devel] New option v2_20_mode

2009-01-20 Thread Martin Paljak
On Mon, Jan 19, 2009 at 3:23 PM, Alon Bar-Lev wrote: > I think the 2.20 should be the default, as the plug&play mode is important. Agreed. > All 2.11 applications will also work as the number of slots is > returned correctly and if the application wish to get fewer slots it > will get only these.

[opensc-devel] APPLE PC/SC bug workaround

2009-01-20 Thread Alon Bar-Lev
Hello Martin, Reading the source I found that you added some code to workaround apple bug [1][2]. Can you please move it into reader-pcsc.c, as this has nothing to do with the generic interface of opensc. I would have done so but I think that you can also verify it to work. Thanks, Alon. [1] ht

Re: [opensc-devel] current status?

2009-01-20 Thread Peter Stuge
Andreas Jellinghaus wrote: > 2.) I think those are better defaults, you think otherwise. > what does everyone else think about these changes? > my take is "doesn't work - ah, the card can't generate an > rsa key, so I need to turn on this option" won't happen very > often, because nearly every card

Re: [opensc-devel] openct - removing USB reader polling

2009-01-20 Thread Alon Bar-Lev
On 12/31/08, Chaskiel Grundman wrote: > It appears that ccid_card_status always fails if it has to probe the device > and no card is present. That's because the response to the GetSlotStatus > message when no card is present has the 'command failed' bit set and the > error code set to ICC_MUTE (s

[opensc-devel] Making a module driver on opensc-0.11.6

2009-01-20 Thread Marc Rios Valles
Hello to everybody, I send this message because I'm having problems linking with libopensc.so in versions 0.11.5 and 0.11.6. The error is located when I try to get the iso7816 driver. At this line: struct sc_card_driver *iso_drv = sc_get_iso7816_driver(); When the execution arribes to this line

Re: [opensc-devel] preview for opensc 0.11.7

2009-01-20 Thread Peter Stuge
Jeffrey Hutzelman wrote: > Incidentally, it is arguably time to change the DELETE ACL's on PIN > and key directories in the cryptoflex and cyberflex access profiles > to $SOPIN instead of NONE. Anyone have a comment on this? Sounds good. Please do. //Peter __

Re: [opensc-devel] openct - removing USB reader polling

2009-01-20 Thread Alon Bar-Lev
On Fri, Jan 2, 2009 at 8:50 PM, Chaskiel Grundman wrote: > This patch should help. It avoids changing the altsetting if there is only > one, which makes it somewhat safe to skip. I don't really like this idea, > since unlike SETCONFIGURATION, there is not really a good reason to avoid > using SETI

Re: [opensc-devel] lets enable lock_login by default

2009-01-20 Thread Martin Paljak
On 30.12.2008, at 21:28, Alon Bar-Lev wrote: > On 12/30/08, Martin Paljak wrote: >> >>> The PKCS#11 specification does not limit concurrent application >>> access >>> to single token in any point in time. >>> The lock term was introduced by OpenSC due to implementation choice. >> At the same t

Re: [opensc-devel] preview for opensc 0.11.7

2009-01-20 Thread Jeffrey Hutzelman
--On Wednesday, December 31, 2008 09:07:52 AM +0200 Alon Bar-Lev wrote: >> Are they actually supposed >> to be private, per PKCS#15? None of the profiles I looked at do this; >> are you updating them all, or just cryptoflex? > > The PKCS#15 implementation already supported private data object

Re: [opensc-devel] openct - removing USB reader polling

2009-01-20 Thread Alon Bar-Lev
OK... I don't know enough about USB, and there is no documentation out there... I've removed the reset (which should not be used per the few documents I found). And found that if I remove the following: ifd_sysdep_usb_set_interface(dev,

Re: [opensc-devel] APPLE PC/SC bug workaround

2009-01-20 Thread Alon Bar-Lev
On 1/16/09, Alon Bar-Lev wrote: > > There are still some options in the example configuration file (one > > distributed with Ubuntu/Debian by default) that differ from code level > > settings: > > hide_empty_tokens (yes in config, no in code) > > use_caching (true in config, false in co

Re: [opensc-devel] [opensc-commits] svn openct changed [1101] eToken now supports the new event interface

2009-01-20 Thread Ludovic Rousseau
2009/1/2 : > Revision: 1101 > Author: alonbl > Date: 2009-01-02 10:00:55 + (Fri, 02 Jan 2009) > > Log Message: > --- > eToken now supports the new event interface > > Modified Paths: > -- >branches/alonbl/usb-ccid-reduce-busy/src/ifd/ifd-etoken.c >branches/alo