Re: [opensc-devel] Online ATR parsing

2010-08-14 Thread Ludovic Rousseau
2009/10/4 Ludovic Rousseau : > Hello, > > Just for the fun I wrote a Google app engine application. The > application is simply an ATR parsing. > It is available at [1]. The parsing source code is available at [2]. > > The web page design can be improved a lot. Suggestions are welcome. > > The next

Re: [opensc-devel] Help with project that demands interoperability betewen cards

2010-08-14 Thread Felipe Blauth
Hello, thanks for the reply. > > What functionality is missing from libp11? A function to delete objects, such as keys and certificates. > Why not use PKCS#11 directly, without additional layers between your > application and the PKCS#11 library? Actually I am still avaliating the b

Re: [opensc-devel] pam_pkcs11: Patch for #239 and #240 (handle more than one cert/pattern matching)

2010-08-14 Thread Ludovic Rousseau
2010/6/26 Wolf Geldmacher : > Here's a patch to solve the issues I've encountered using pam_pkcs11. > > In regards to #239 (pam_pkcs11 only looks at first certificate on > token): > > The fix for this turns out to be somewhat problematic, and I'm not at > all sure, whether my implementation of the

Re: [opensc-devel] Help with project that demands interoperability betewen cards

2010-08-14 Thread Martin Paljak
Hello, On Jul 23, 2010, at 7:35 PM, Felipe Blauth wrote: > I'm going to start a project in wich I need to have interoperability between > smart cards. Since not all cards are supported by OpenSC I would like some > advice on the ideas I already have: > > 1) I've been studying PKCS#11 interface

Re: [opensc-devel] How to delete an X.509 certificate / RSA public key when RSA private key is missing

2010-08-14 Thread Martin Paljak
Hello, On Aug 5, 2010, at 9:45 PM, Jean-Michel Pouré - GOOZE wrote: > > Public RSA Key [Public Key] > Native : no > Path: 3f0050153001 ... > X.509 Certificate [StartCom Free Certificate Member's StartCom Ltd. ID] > Path : 3f0050153101 > Unfortunately, deleting p

Re: [opensc-devel] Patch to display correct EF ACLs in opensc-explorer

2010-08-14 Thread Martin Paljak
Hello, On Aug 8, 2010, at 9:50 PM, Emanuele Pucciarelli wrote: > Hello, > > it seems to me that ACL handling in opensc-explorer is wrong. It > assumes SC_AC_OP_* flags are numbered in the same order as in > opensc-explorer.c:436 (used to display DF ACLs), which is correct. But > then, a few line

Re: [opensc-devel] card driver and locking

2010-08-14 Thread Martin Paljak
Hello, On Aug 12, 2010, at 5:23 AM, Nikolay Elenkov wrote: > I am developing a (proprietary) dynamic card driver (Windows). I have the > basics > setup working, I can load and login. However I am having some troubles with > locking (transactions). Any advice is much appreciated. For which card? W

Re: [opensc-devel] Developer Statement On Insecure Default Settings

2010-08-14 Thread Martin Paljak
Hello, It is insecure if you use an insecure card with an insecure profile which does not require PIN verification (user consent) before every operation. It does not matter if your card is "secure" and/or the application using the PKCS#11 module is built with security and usability in mind (not