Re: [opensc-devel] Apple Keychain is Open Source software

2010-07-01 Thread Martin Paljak
Hello, On Jul 1, 2010, at 15:07 , Jean-Michel Pouré - GOOZE wrote: > Just a quick note that Apple Keychain is free, open source software > released under the terms of the APSL. So it seems that a better support > for smartcards could be added. > > Reference: http://en.wikipedia.org/wiki/Keychain_

Re: [opensc-devel] Apple Keychain is Open Source software

2010-07-01 Thread Ludovic Rousseau
Le 1 juillet 2010 14:07, Jean-Michel Pouré - GOOZE a écrit : > Just a quick note that Apple Keychain is free, open source software > released under the terms of the APSL. So it seems that a better support > for smartcards could be added. > > Reference: http://en.wikipedia.org/wiki/Keychain_%28Mac_

Re: [opensc-devel] How do we know that a card is locked and needs unblocking using PUK?

2010-07-01 Thread Kalev Lember
On 07/01/2010 03:14 PM, Kalev Lember wrote: > On 07/01/2010 02:53 PM, Martin Paljak wrote: >> I don't see why would it be bad to expose the token info flags field itself. > > It might be fine. What my patch does is expose new flags _in the same > manner as existing flags are exposed_; if you want t

Re: [opensc-devel] How do we know that a card is locked and needs unblocking using PUK?

2010-07-01 Thread Kalev Lember
On 07/01/2010 02:53 PM, Martin Paljak wrote: > I don't see why would it be bad to expose the token info flags field itself. It might be fine. What my patch does is expose new flags _in the same manner as existing flags are exposed_; if you want to rework the libp11 API to give direct access to tok

[opensc-devel] Apple Keychain is Open Source software

2010-07-01 Thread Jean-Michel Pouré - GOOZE
Just a quick note that Apple Keychain is free, open source software released under the terms of the APSL. So it seems that a better support for smartcards could be added. Reference: http://en.wikipedia.org/wiki/Keychain_%28Mac_OS%29 Kind regards, Jean-Michel -- Jean-Michel Pour

Re: [opensc-devel] How do we know that a card is locked and needs unblocking using PUK?

2010-07-01 Thread Viktor TARASOV
Martin Paljak wrote: > On Jul 1, 2010, at 14:07 , Jean-Michel Pouré - GOOZE wrote: > >> I cannot lock my Feitian PKI card. >> > If you can not lock your card, why bother with unlocking :) > > >> Do you think tries left is implemented in the entersafe driver? >> > > No, entersafe dr

Re: [opensc-devel] How do we know that a card is locked and needs unblocking using PUK?

2010-07-01 Thread Martin Paljak
I don't see why would it be bad to expose the token info flags field itself. On Jul 1, 2010, at 14:36 , Kalev Lember wrote: > On 07/01/2010 01:28 PM, Martin Paljak wrote: >> for a PIN or if PIN verification fails with CKR_PIN_LOCKED (which is >> SC_ERROR_AUTH_METHOD_BLOCKED in libopensc). >> >

Re: [opensc-devel] How do we know that a card is locked and needs unblocking using PUK?

2010-07-01 Thread Kalev Lember
On 07/01/2010 01:28 PM, Martin Paljak wrote: > for a PIN or if PIN verification fails with CKR_PIN_LOCKED (which is > SC_ERROR_AUTH_METHOD_BLOCKED in libopensc). > > If triest left is implemented by the driver and available, > CKF_USER_PIN_LOCKED token flag can also be used to detect a locked > PI

Re: [opensc-devel] How do we know that a card is locked and needs unblocking using PUK?

2010-07-01 Thread Martin Paljak
On Jul 1, 2010, at 14:07 , Jean-Michel Pouré - GOOZE wrote: > I cannot lock my Feitian PKI card. If you can not lock your card, why bother with unlocking :) > Do you think tries left is implemented in the entersafe driver? No, entersafe driver does not seem to implement tries left handling, as

Re: [opensc-devel] How do we know that a card is locked and needs unblocking using PUK?

2010-07-01 Thread Jean-Michel Pouré - GOOZE
Dear Martin, I cannot lock my Feitian PKI card. Do you think tries left is implemented in the entersafe driver? Kind regards, Jean-Michel On Thu, 2010-07-01 at 13:28 +0300, Martin Paljak wrote: > When pkcs15-tool --list-pins shows for a zero tries left: > PIN [PIN2] > Com. Flags: 0x0 >

Re: [opensc-devel] How do we know that a card is locked and needs unblocking using PUK?

2010-07-01 Thread JP Szikora
Jean-Michel Pouré - GOOZE a écrit : > Simple question, I found no answer. > > pkcs11-tool -I -l Cryptoki version 2.20 Manufacturer OpenSC (www.opensc-project.org) Library smart card PKCS#11 API (ver 0.0) Please enter User PIN: error: PKCS11 function C_Login failed: rv = CKR_PIN_LOCK

Re: [opensc-devel] How do we know that a card is locked and needs unblocking using PUK?

2010-07-01 Thread Martin Paljak
On Jul 1, 2010, at 12:47 , Jean-Michel Pouré - GOOZE wrote: > Simple question, I found no answer. Simple: When pkcs15-tool --list-pins shows for a zero tries left: PIN [PIN2] Com. Flags: 0x0 ID: 02 Flags : [0x00] Length: min_len:5, max_len:12, stor

[opensc-devel] How do we know that a card is locked and needs unblocking using PUK?

2010-07-01 Thread Jean-Michel Pouré - GOOZE
Simple question, I found no answer. Kind regards, Jean-Michel -- Jean-Michel Pouré - Gooze - http://www.gooze.eu ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc

Re: [opensc-devel] Projects for OpenSC: Gnome Seahorse, Apple Keychain

2010-07-01 Thread Martin Paljak
On Jul 1, 2010, at 09:59 , Jean-Michel Pouré - GOOZE wrote: > * More Mac OS X and GNU/Linux frontends Java is available on Linux and Mac OS X, which makes a Java front-end useful universally. From personalization perspective, pushing opensc-pkcs11 personalization capabilities to the limits it has

Re: [opensc-devel] Projects for OpenSC: Gnome Seahorse, Apple Keychain

2010-07-01 Thread Anders Rundgren
Jean-Michel Pouré - GOOZE wrote: > On Thu, 2010-07-01 at 09:45 +0200, Anders Rundgren wrote: >> I'm also curious about this. They (MSFT) claim that minidriver is >> the future but it is just an abstraction layer, you still need a >> driver although a simple(r) one. > > I have no idea how MSFT wo

Re: [opensc-devel] Projects for OpenSC: Gnome Seahorse, Apple Keychain

2010-07-01 Thread Jean-Michel Pouré - GOOZE
On Thu, 2010-07-01 at 09:45 +0200, Anders Rundgren wrote: > > I'm also curious about this. They (MSFT) claim that minidriver is > the future but it is just an abstraction layer, you still need a > driver although a simple(r) one. I have no idea how MSFT works. We ordered Feitian some MSFT tok

Re: [opensc-devel] Projects for OpenSC: Gnome Seahorse, Apple Keychain

2010-07-01 Thread Anders Rundgren
ean-Michel Pouré - GOOZE wrote: > * USB key support beyond CCID > > It seems that MS Windows incorporates a mechanism which allows USB token > to work without driver. So there is probably a standard. It would be > nice to hear from that standard. I'm also curious about this. They (MSFT) clai

[opensc-devel] Projects for OpenSC: Gnome Seahorse, Apple Keychain

2010-07-01 Thread Jean-Michel Pouré - GOOZE
Dear all, As Martin is announcing projects. I would like to point out some priorities from a user point of view. This is my own opinion and it does not interfere with Martin's projects. * More Mac OS X and GNU/Linux frontends Now that we have a reliable Feitian PKI card and token, we need good