Re: [opensc-devel] OpenSC-Java: PKCS11SessionStore vs, PKCS11Sesson and KeyStore

2010-01-28 Thread Peter Stuge
Harry Anuszewski wrote: > if I send the pin to the PKCS11LoadStoreParm it is cached once I > open the keystore and the only way to clear it is to reload the > applet. Is there a knob in the opensc config file that you could tweak, to control this? //Peter

Re: [opensc-devel] [opensc-commits] svn opensc changed[3952] pkcs11: do not create slot for PUK

2010-01-28 Thread Martin Paljak
On Jan 28, 2010, at 23:59 , Douglas E. Engert wrote: > Please don't allow the user to accidentally try and change the PUK. > The PUK should be reserved for the card admin, not the user. > If the OpenSC is going to provide a way to change the PUK, > via PKCS#11, please consider making this an option

[opensc-devel] OpenSC-Java: PKCS11SessionStore vs, PKCS11Sesson and KeyStore

2010-01-28 Thread Harry Anuszewski
Hello, I am working on a program where a user is going to have to sign several pieces of data over the course of the time they are logged in. I am trying to find out the best way to use OpenSC-java where I can manage pin usage. For example the user logs in with there pin, then they make ch

Re: [opensc-devel] [opensc-commits] svn opensc changed[3952] pkcs11: do not create slot for PUK

2010-01-28 Thread Douglas E. Engert
Please don't allow the user to accidentally try and change the PUK. The PUK should be reserved for the card admin, not the user. If the OpenSC is going to provide a way to change the PUK, via PKCS#11, please consider making this an option (off by default) in the opensc.conf. Viktor TARASOV wrote:

[opensc-devel] TracTags on OpenSC wiki

2010-01-28 Thread Martin Paljak
Hello, I installed the TracTags (http://trac-hacks.org/wiki/TagsPlugin#Whataretags) plugin on OpenSC trac. With quite many pages on the wiki it would be useful to tag and list relevant pages together, like: - maintained / unmaintained drivers - supported / semisupported / unsupported cards -

[opensc-devel] Error with opensc in Windows

2010-01-28 Thread evalues
Hello, It's the first I'm using opensc libraries and i have found some problems compiling the opensc project for Windows OS. I've downloaded the last opensc version 0.11.12, and I'm using Visual Studio 2005 to compile the project. To do it, I've linked with Libtool libltdl3 (version 1.5.26) and O

Re: [opensc-devel] [opensc-commits] svn opensc changed[3952] pkcs11: do not create slot for PUK

2010-01-28 Thread Martin Paljak
On Jan 28, 2010, at 16:56 , Andreas Jellinghaus wrote: > Am Donnerstag 28 Januar 2010 14:56:43 schrieb Viktor TARASOV: >> Ok, for a while, I'll commit proposal from Andreas. >> > I fixed the text a bit. If I understood you right, the slot > needs the PUK for a login, and the purpose is to change t

Re: [opensc-devel] [opensc-commits] svn opensc cha nged[3952] pkcs11: do not create slot for PUK

2010-01-28 Thread Andreas Jellinghaus
Am Donnerstag 28 Januar 2010 14:56:43 schrieb Viktor TARASOV: > Ok, for a while, I'll commit proposal from Andreas. > I fixed the text a bit. If I understood you right, the slot needs the PUK for a login, and the purpose is to change the PIN, right? how does that relate to other new option in ope

Re: [opensc-devel] [opensc-commits] svn opensc changed[3952] pkcs11: do not create slot for PUK

2010-01-28 Thread Viktor TARASOV
Martin Paljak wrote: > On Jan 28, 2010, at 15:05 , Viktor TARASOV wrote: > >> By the way, afaiu, nonrepudiation key presume existence of something >> like 'Sign PIN'. >> If so, how do you expose this PIN to PKCS#11? >> > What do you mean with a "Sign PIN" ? eID-s often have two PIN-s - one

Re: [opensc-devel] [opensc-commits] svn opensc changed[3952] pkcs11: do not create slot for PUK

2010-01-28 Thread Martin Paljak
On Jan 28, 2010, at 15:05 , Viktor TARASOV wrote: > By the way, afaiu, nonrepudiation key presume existence of something > like 'Sign PIN'. > If so, how do you expose this PIN to PKCS#11? What do you mean with a "Sign PIN" ? eID-s often have two PIN-s - one for authentication, one for signatures.

Re: [opensc-devel] [opensc-commits] svn opensc changed[3954] opensc.conf: in pkcs11 section a new option to disable slot for User PUK

2010-01-28 Thread Viktor TARASOV
Andreas Jellinghaus wrote: > Am Donnerstag 28 Januar 2010 13:17:05 schrieb webmas...@opensc-project.org: > >> + >> +# Disable slot for User PUK >> +# >> +# Default: false >> +# disable_user_puk_slot = true; >> > > I'm no fan of doube negations

Re: [opensc-devel] [opensc-commits] svn opensc changed[3952] pkcs11: do not create slot for PUK

2010-01-28 Thread Viktor TARASOV
Martin Paljak wrote: > On Jan 28, 2010, at 12:50 , Viktor TARASOV wrote: > >> Hi Martin, >> >> Martin Paljak wrote: >> >>> On Jan 28, 2010, at 10:28 , webmas...@opensc-project.org wrote: >>> >>> Revision: 3952 Author: viktor.tarasov Date: 2010-01-28 08:28:25 +000

[opensc-devel] New API for Miocos card

2010-01-28 Thread Viktor TARASOV
Hi, owners of the miocos card are heartily invited to test current trunk version. Your can also indicate where can I buy OpenSC compatible miocos cards. Kind wishes, Viktor. -- Viktor Tarasov ___ opensc-devel mailing list opensc-devel@lists.open

Re: [opensc-devel] [opensc-commits] svn opensc changed[3952] pkcs11: do not create slot for PUK

2010-01-28 Thread Martin Paljak
On Jan 28, 2010, at 12:50 , Viktor TARASOV wrote: > Hi Martin, > > Martin Paljak wrote: >> On Jan 28, 2010, at 10:28 , webmas...@opensc-project.org wrote: >> >>> Revision: 3952 >>> Author: viktor.tarasov >>> Date: 2010-01-28 08:28:25 + (Thu, 28 Jan 2010) >>> >>> Log Message: >>> --

Re: [opensc-devel] [opensc-commits] svn opensc changed[3954] opensc.conf: in pkcs11 section a new option to disable slot for User PUK

2010-01-28 Thread Andreas Jellinghaus
Am Donnerstag 28 Januar 2010 13:17:05 schrieb webmas...@opensc-project.org: > + > + # Disable slot for User PUK > + # > + # Default: false > + # disable_user_puk_slot = true; I'm no fan of doube negations. can't we have an enabling option instead, a

Re: [opensc-devel] [opensc-commits] svn opensc changed[3952] pkcs11: do not create slot for PUK

2010-01-28 Thread Viktor TARASOV
Hi Martin, Martin Paljak wrote: > On Jan 28, 2010, at 10:28 , webmas...@opensc-project.org wrote: > >> Revision: 3952 >> Author: viktor.tarasov >> Date: 2010-01-28 08:28:25 + (Thu, 28 Jan 2010) >> >> Log Message: >> --- >> pkcs11: do not create slot for PUK >> > > This pr

Re: [opensc-devel] [opensc-commits] svn opensc changed[3952] pkcs11: do not create slot for PUK

2010-01-28 Thread Martin Paljak
On Jan 28, 2010, at 10:28 , webmas...@opensc-project.org wrote: > Revision: 3952 > Author: viktor.tarasov > Date: 2010-01-28 08:28:25 + (Thu, 28 Jan 2010) > > Log Message: > --- > pkcs11: do not create slot for PUK This provided an easy way to change the PUK code via a GUI - Fir