Re: [opensc-devel] OpenSC experimental installer ?

2010-03-30 Thread Alon Bar-Lev
On Tue, Mar 30, 2010 at 11:44 PM, Martin Paljak wrote: >> The svn for binary file distribution is bad, as you cannot really >> delete from there... So as I don't even know if the setup is working, >> I prefer to send it directly to testers for now. > > A simple sshfs "fileserver" could be set up.

Re: [opensc-devel] OpenSC experimental installer ?

2010-03-30 Thread Martin Paljak
On Mar 30, 2010, at 23:36 , Alon Bar-Lev wrote: > On Tue, Mar 30, 2010 at 3:34 PM, Martin Paljak wrote: >> On Mar 30, 2010, at 15:22 , Alon Bar-Lev wrote: >>> You can build one at [1]. >>> >>> http://opensc-project.org/build >> And the InnoSetup one linked from >> http://www.opensc-project.org/o

Re: [opensc-devel] OpenSC experimental installer ?

2010-03-30 Thread Alon Bar-Lev
On Tue, Mar 30, 2010 at 3:34 PM, Martin Paljak wrote: > On Mar 30, 2010, at 15:22 , Alon Bar-Lev wrote: >> You can build one at [1]. >> >> http://opensc-project.org/build > And the InnoSetup one linked from > http://www.opensc-project.org/opensc/wiki/WindowsInstaller > > Alon, if you build a new

Re: [opensc-devel] Active developers on opensc-project.org

2010-03-30 Thread Martin Paljak
2010/3/30 Andreas Jellinghaus : > Am Dienstag 30 März 2010 20:59:58 schrieb Martin Paljak: >> > i.e. if there are no active testers and developers for some plattform, >> > we should people know, even if opensc is in the ports collection or >> > something like that. for example debian doesn't upgrad

Re: [opensc-devel] Active developers on opensc-project.org

2010-03-30 Thread Andreas Jellinghaus
Am Dienstag 30 März 2010 20:59:58 schrieb Martin Paljak: > > * at least "pkcs11-tool --test --login" for already initialized cards. > > again some failures are ok (e.g. opensc trying some mechanisms on very > > restricted keys - for example signature cards restricted to few signing > > mechanism

Re: [opensc-devel] Active developers on opensc-project.org

2010-03-30 Thread Martin Paljak
Hello, On Mar 30, 2010, at 21:14 , Andreas Jellinghaus wrote: > disabling access to passive developers is a good thing, as long time > unused and unmaintained accounts are a typical security problem. This more of a "cleanup" and documentation process than a security process, which is a by-product.

Re: [opensc-devel] Active developers on opensc-project.org

2010-03-30 Thread Chaskiel Grundman
I'd already asked to have my commit access revoked, so this change is fine with me. ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel

Re: [opensc-devel] Apache2 mod_ssl with smart cards

2010-03-30 Thread Robert Relyea
On 03/30/2010 03:41 AM, Jean-Michel Pouré - GOOZE wrote: > Hello, > > I would like to write a tutorial explaining how to configure Apache2 and > mod_ssl to use smartcards. > Try mod_nss. (pkcs #11 support is built-in). The support is used mostly for hardware accelerators, but the same code work

Re: [opensc-devel] Active developers on opensc-project.org

2010-03-30 Thread Andreas Jellinghaus
Am Montag 29 März 2010 16:28:05 schrieb Douglas E. Engert: > There are also developers who don't commit directly. I am one of them who > has submitted many changes and maintains the PIV card driver. But I send > in changes and Andreas is the one who usually commits them for me. > > I suspect that

Re: [opensc-devel] Active developers on opensc-project.org

2010-03-30 Thread Andreas Jellinghaus
disabling access to passive developers is a good thing, as long time unused and unmaintained accounts are a typical security problem. but please send a personal email to everyone explaining the situation and how to proceed, so people don't feel "kicked off" a project, only because they didn't subm

Re: [opensc-devel] cardos_format() with or without argument?

2010-03-30 Thread Andreas Jellinghaus
Am Sonntag 28 März 2010 22:26:57 schrieb Ludovic Rousseau: > Hello, > > In src/tools/cardos-tool.c line 1157 the function cardos_format() is > called as: if ((err = cardos_format(opt_startkey))) { > > But the definitions of cardos_format() are > line 502 with OpenSSL > static int cardos_forma

Re: [opensc-devel] OpenSC experimental installer ?

2010-03-30 Thread Jean-Michel Pouré - GOOZE
On Tue, 2010-03-30 at 15:34 +0300, Martin Paljak wrote: > And the InnoSetup one linked from > http://www.opensc-project.org/opensc/wiki/WindowsInstaller > > Alon, if you build a new one and upload it, please add a link to that > page as well. > I would be delighted to test this installer under W

Re: [opensc-devel] Apache2 mod_ssl with smart cards

2010-03-30 Thread Martin Paljak
On Mar 30, 2010, at 15:23 , Alon Bar-Lev wrote: > Smartcards are usually exists at client side, so it has nothing to do > with mod_ssl. > All your questions are related to browsers. Why so? I would of course not suggest running a real life web server against a smart card or USB token, but theoret

Re: [opensc-devel] OpenSC experimental installer ?

2010-03-30 Thread Martin Paljak
On Mar 30, 2010, at 15:22 , Alon Bar-Lev wrote: > You can build one at [1]. > > http://opensc-project.org/build And the InnoSetup one linked from http://www.opensc-project.org/opensc/wiki/WindowsInstaller Alon, if you build a new one and upload it, please add a link to that page as well. --

Re: [opensc-devel] Apache2 mod_ssl with smart cards

2010-03-30 Thread Alon Bar-Lev
Smartcards are usually exists at client side, so it has nothing to do with mod_ssl. All your questions are related to browsers. 2010/3/30 Jean-Michel Pouré - GOOZE : > Hello, > > I would like to write a tutorial explaining how to configure Apache2 and > mod_ssl to use smartcards. > > My only quest

Re: [opensc-devel] OpenSC experimental installer ?

2010-03-30 Thread Alon Bar-Lev
You can build one at [1]. http://opensc-project.org/build If you do not wish to compile, I can upload a build for you to test, send me a URL. Alon. 2010/3/30 Jean-Michel Pouré - GOOZE : > Dear friends, > > I know this was discussed on the ML, but I could not follow discussions. > Is there an ex

[opensc-devel] OpenSC experimental installer ?

2010-03-30 Thread Jean-Michel Pouré - GOOZE
Dear friends, I know this was discussed on the ML, but I could not follow discussions. Is there an experimental OpenSC installer for Windows available somewhere? Kind regards -- Jean-Michel Pouré - jmpo...@gooze.eu ___ opensc-devel m

[opensc-devel] Apache2 mod_ssl with smart cards

2010-03-30 Thread Jean-Michel Pouré - GOOZE
Hello, I would like to write a tutorial explaining how to configure Apache2 and mod_ssl to use smartcards. My only question is: in a production environment, there is several SSL connections at once. Can OpenSC handle high load? Or is OpenSC + mod_ssl only for small and very secure operations? An