Re: [opensc-devel] "pkcs15-init -U" question

2010-04-22 Thread Xiaoshuo Wu
On Thu, 22 Apr 2010 18:55:36 +0800, Viktor TARASOV wrote: > One more moment, > your 'card->caps' should not have SC_CARD_CAP_USE_FCI_AC. > > Look at > http://www.opensc-project.org/opensc/browser/trunk/src/pkcs15init/pkcs15-lib.c#L3063 Sure, I remember that. __

Re: [opensc-devel] opensc 0.11.13 and openssl 1.0 oddity

2010-04-22 Thread Aleksey Samsonov
Hello, Jan Just Keijser wrote: Hi Martin, Martin Paljak wrote: On Apr 22, 2010, at 00:25 , Jan Just Keijser wrote: Hi Andreas, Andreas Jellinghaus wrote: hmm. if we had only one engine doing both rsa and gost, the problem would be gone, without this "hack" required in opensc? my po

Re: [opensc-devel] wget and pkcs11?

2010-04-22 Thread Robert Relyea
On 04/21/2010 10:49 PM, Martin Paljak wrote: > On Apr 21, 2010, at 22:01 , Jim Rees wrote: > >> I'm in need of a command line utility that can do https fetches given a url, >> like wget, but use pkcs11 for the crypto ops, so I can store the client >> cert/key on a smart card. Firefox will do th

[opensc-devel] Source code of PKCS#11 for .NET cards

2010-04-22 Thread Ludovic Rousseau
>From my blog http://ludovicrousseau.blogspot.com/ Source code of PKCS#11 for .NET cards Gemalto provides the source code of its PKCS#11 library for its .NET (dot net) cards at http://www.gemalto.com/products/dotnet_card/resources/libraries.html The software licence is GNU Lesser General Public L

Re: [opensc-devel] opensc 0.11.13 and openssl 1.0 oddity

2010-04-22 Thread Jan Just Keijser
Hi Martin, Martin Paljak wrote: > On Apr 22, 2010, at 00:25 , Jan Just Keijser wrote: > >> Hi Andreas, >> >> Andreas Jellinghaus wrote: >> >>> hmm. if we had only one engine doing both rsa and gost, the >>> problem would be gone, without this "hack" required in opensc? >>> >>> my point of

Re: [opensc-devel] [SPAM] Re: "pkcs15-init -U" question

2010-04-22 Thread Viktor TARASOV
Xiaoshuo Wu wrote: > On Thu, 22 Apr 2010 17:09:37 +0800, Viktor TARASOV > wrote: > >> Actually there is no way to update certificates for the cards that do >> not returns ACLs at file selection. > That's sensible. > >> The 'sc_pkcs15init_update_certificate' should be modified; it has to >> instan

Re: [opensc-devel] [SPAM] Re: "pkcs15-init -U" question

2010-04-22 Thread Xiaoshuo Wu
On Thu, 22 Apr 2010 17:09:37 +0800, Viktor TARASOV wrote: > Actually there is no way to update certificates for the cards that do > not returns ACLs at file selection. That's sensible. > The 'sc_pkcs15init_update_certificate' should be modified; it has to > instantiate certificate file from th

Re: [opensc-devel] "pkcs15-init -U" question

2010-04-22 Thread Viktor TARASOV
Xiaoshuo Wu wrote: > Hello, > I am stuck in updating certificate using "pkcs15-init -U" command, > here is what I did: > I'd like to store one certificate and update it with a new one, so I > derived two certificates with one private key with few openssl commands. > Then I erase & initialize the

Re: [opensc-devel] [opensc-commits] svn opensc changed[4264] Support for CardOS 4.4

2010-04-22 Thread JP Szikora
Andreas Jellinghaus a écrit : > Am Mittwoch 21 April 2010 16:38:24 schrieb webmas...@opensc-project.org: > >> Revision: 4264 >> Author: jps >> Date: 2010-04-21 14:38:23 + (Wed, 21 Apr 2010) >> > > wow, great! chears for jps! > Hi, Andreas! > does anyone know a source where I ca

Re: [opensc-devel] Middleware-free USB PKI Tokens?

2010-04-22 Thread Viktor TARASOV
Andreas Jellinghaus wrote: > Am Montag 19 April 2010 16:57:35 schrieb Jan Just Keijser: > >> Note: there is no absolutely secure method to establish a connection >> between a card on a remote machine and the CA . Period. >> > > I think that is wrong. some smart card protocols work like that

Re: [opensc-devel] Sub-project for OpenSC with secure messaging and multi-applications

2010-04-22 Thread Viktor TARASOV
Hi, Martin Paljak wrote: > On Apr 21, 2010, at 20:25 , Viktor TARASOV wrote: > >> I would like to start a new OpenSC sub-project, forked from the current >> trunk, >> that should be an experimental branch for the implementation of >> SecureMessaging, MultiApplication, >> combined ACLs, etc. >