Re: [opensc-devel] State of ACOS5 support

2010-01-13 Thread Andreas Jellinghaus
I have some acos5 cards. cards are not the problem, but developers with time. unless one finds time to write a driver, there won't one. > By the way, I am very pleased by Feitian quality and support, so I may > consider buying a batch of Feitian PKI cards. They send me free cards > for testing an

Re: [opensc-devel] State of ACOS5 support

2010-01-13 Thread Jean-Michel Pouré
Le mercredi 13 janvier 2010 à 21:24 +0100, Andreas Jellinghaus a écrit : > writing an acos5 driver would be great, as the cards are cheap and > have > everything we need, and the company hands out the card manuals without > strange NDA requirements or similar stuff. Hoops! I wrote ACS a couple o

Re: [opensc-devel] State of ACOS5 support

2010-01-13 Thread Andreas Jellinghaus
Am Mittwoch 13 Januar 2010 21:09:56 schrieb Jean-Michel Pouré: > Hello, > > ACOS5 cards are only a few dollars and would be perfect for GNU/Linux. > It offers DES / 3DES / AES-128 bits / RSA (up to 2,048 bits) capability. > > I can see code for ACOS5 support in openSC, but it certainly a work in

[opensc-devel] State of ACOS5 support

2010-01-13 Thread Jean-Michel Pouré
Hello, ACOS5 cards are only a few dollars and would be perfect for GNU/Linux. It offers DES / 3DES / AES-128 bits / RSA (up to 2,048 bits) capability. I can see code for ACOS5 support in openSC, but it certainly a work in progress. What is the state of ACOS5 support in OpenSC and what needs to be

Re: [opensc-devel] Trac openid auth

2010-01-13 Thread Peter Stuge
Eric wrote: > >(Though it means two login and logout links in the Trac menu bar.) > > Can we modify the logout link to point to a logout script, which > chooses (or redirects to) the correct way to logout based on the > method the session was logged in with? The two logout links are only a cosme

Re: [opensc-devel] Omnikey cardman 3621 pinpad test

2010-01-13 Thread Jean-Michel Pouré
Le mercredi 13 janvier 2010 à 15:53 +0200, Martin Paljak a écrit : > Which application are you referring to? I was referring to pinpad test in src/tests/ pinpad is turned-on in opensc.conf For example, in pkcs15-init, I need to enter pin using --pin at command line. I cannot enter pin only on t

Re: [opensc-devel] Feitian Entersafe : impossible to initialise (ok)

2010-01-13 Thread Jean-Michel Pouré
Le mercredi 13 janvier 2010 à 14:22 +0100, Jean-Michel Pouré a écrit : > Thanks. One problem did not catch my eye. It seems that I cannot erase > cards any longer. Please discard my message to the mailing list. pkcs15-init -v --create-pkcs15 to initialiaze the Feitian card. Then and only then I

Re: [opensc-devel] Omnikey cardman 3621 pinpad test

2010-01-13 Thread Martin Paljak
On 13.01.2010, at 12:46, Jean-Michel Pouré wrote: > The Omnikey Cardman 3621 is smartcard reader with pinpad, same as the > Omnikey Cardman 3821 but without LCD display. > > I am pleased to report that Cardman 3621 /src/tests/pintest is correct. I have 3821 which I use constantly -> it is suppose

[opensc-devel] Feitian Entersafe : impossible to initialise

2010-01-13 Thread Jean-Michel Pouré
Le mercredi 13 janvier 2010 à 13:27 +0100, Andreas Jellinghaus a écrit : > thanks, commited to svn trunk. Thanks. One problem did not catch my eye. It seems that I cannot erase cards any longer. I would reproduce with one blank&never used card and one used card: pkcs15-init -E -vvv 2010-01-13 1

Re: [opensc-devel] Regression tests suite in /src/test/regression

2010-01-13 Thread Andreas Jellinghaus
Am Mittwoch 13 Januar 2010 12:31:38 schrieb Jean-Michel Pouré: > When looking at crypt0001 test, it has these lines: > p15_init --no-so-pin > p15_set_pin -a 01 > p15_gen_key rsa/1024 --id 45 -a 01 > > My system does not seem to have p15_init. If you explain me more, I can > handle a few test and m

Re: [opensc-devel] Feitian Entersafe : transferring a key to a smartcard

2010-01-13 Thread Andreas Jellinghaus
thanks, commited to svn trunk. Regards, Andreas ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel

[opensc-devel] Regression tests suite in /src/test/regression

2010-01-13 Thread Jean-Michel Pouré
> also the regression test suite might be a better place than the wiki > for testing such things. Dear friends, I would like to run OpenSC regression test suite testing various smartcards and then reporting the community. I am using a Feitian PKI card, but I also plan to test other cards like

[opensc-devel] Omnikey cardman 3621 pinpad test

2010-01-13 Thread Jean-Michel Pouré
Dear all, The Omnikey Cardman 3621 is smartcard reader with pinpad, same as the Omnikey Cardman 3821 but without LCD display. I am pleased to report that Cardman 3621 /src/tests/pintest is correct. When asked to enter pin, I press return on computer keyboard and then enter pin on the Omnikey Ca

Re: [opensc-devel] Feitian Entersafe : transferring a key to a smartcard

2010-01-13 Thread Jean-Michel Pouré
Le mardi 12 janvier 2010 à 12:13 +0800, Xiaoshuo Wu a écrit : > Thank you for reporting this, it's a flaw in entersafe driver. > I'd like to propose the patch for it, it removes the assert line and > some > unused code, solves a problem with ePass3000, see my attachment. > Regards, Xiaoshuo Dea

Re: [opensc-devel] Trac openid auth

2010-01-13 Thread Eric
>(Though it means two login and logout links in the Trac menu bar.) Can we modify the logout link to point to a logout script, which chooses (or redirects to) the correct way to logout based on the method the session was logged in with? - Eric Peter Stuge wrote: > Andreas Jellinghaus wrote: >

Re: [opensc-devel] Feitian Entersafe : transferring a key to a smartcard

2010-01-13 Thread Eric
I have also been contemplating my small personal PKI hierarchy. From the top of my head: The Root CA would function on a dedicated old laptop, disconnected and offline, running off a linux USB stick, with the CA's private keys and intermediate CA's private key backups stored on smart cards, bot

Re: [opensc-devel] Feitian Entersafe : transferring a key to a smartcard

2010-01-13 Thread Eric
> Why don't you want to generate the keys on the card? Under normal circumstances that's the thing smart cards are for. I've got limited experience with PKI policies, but what about key escrow? Or the poor man's version, creating a backup copy of a smart card on another smart card, kept in a f

[opensc-devel] Feitian Entersafe : transfering a key to a smartcard

2010-01-13 Thread Jean-Michel Pouré
Hello, To clarify my knowledge, I would like to contribute some user documentation on the wiki. The subject of transferring an RSA key pair to a smartcard seems interesting. Here are some newbee questions before I go on: * I would like to add a page with dummy certificates on the wiki. One root