Re: [opensc-devel] Initialisation of CardOS

2010-08-31 Thread Martin Paljak
Hello, On Sep 1, 2010, at 12:59 AM, Andre Zepezauer wrote: >>> Hello all, >>> >>> what do you think of dropping the possibility to initialise CardOS smart >>> cards in 0.11.14? The reason of doing so, is to stop the production of >>> more of these questionable split-key cards. >> What would be the

Re: [opensc-devel] Personal Review Of The Upcoming 0.12.0 Release

2010-08-31 Thread Aleksey Samsonov
Hello, Martin Paljak wrote: > On Aug 30, 2010, at 2:52 PM, Emanuele Pucciarelli wrote: >>> The handful of drivers with insecure operations I was talking about, I >>> got with the following command: grep -n OPENSSL libopensc/card-*.c >>> >>> But looking closer to each drivers source, I must confess

Re: [opensc-devel] use algorithm_ref in set_security_env

2010-08-31 Thread Martin Paljak
Hello Andre, On Aug 31, 2010, at 9:39 PM, Andre Zepezauer wrote: > > Improving opensc that way, that it has a greater awareness of the pkcs15 > structures on cards is a goal of mine. If this is the development you > ask for, then I could do it. A second goal is, to use these cards > according to t

Re: [opensc-devel] use algorithm_ref in set_security_env

2010-08-31 Thread Peter Stuge
Andre Zepezauer wrote: > > > where a completely new (but still initialised) card will > > > instantly work with opensc. Without any hacks and emulations of > > > course. .. > It's not that easy. Yes exactly. ;) //Peter ___ opensc-devel mailing list ope

Re: [opensc-devel] use algorithm_ref in set_security_env

2010-08-31 Thread Andre Zepezauer
On Wed, 2010-09-01 at 00:52 +0200, Peter Stuge wrote: > Andre, please try to trim your replies. Keep in mind that you only > spend 1 * time trimming, while everyone who has to read spends n * time > seraching for your actual reply. > > > Andre Zepezauer wrote: > > where a completely new (but stil

Re: [opensc-devel] Personal Review Of The Upcoming 0.12.0 Release

2010-08-31 Thread Aleksey Samsonov
Hello, Martin Paljak wrote: >> 2. The announcement of the GOST public key algorithm seems to me very >> optimistic. Because the current implementation isn't functional at all >> [1][2]. > Good catch. The GOST public key algorithm is working (the current implementation), but in [1] [2] by a lucky

Re: [opensc-devel] use algorithm_ref in set_security_env

2010-08-31 Thread Peter Stuge
Andre, please try to trim your replies. Keep in mind that you only spend 1 * time trimming, while everyone who has to read spends n * time seraching for your actual reply. Andre Zepezauer wrote: > where a completely new (but still initialised) card will instantly > work with opensc. Without any h

Re: [opensc-devel] Initialisation of CardOS

2010-08-31 Thread Andre Zepezauer
On Tue, 2010-08-31 at 10:35 +0300, Martin Paljak wrote: > Hello? > On Aug 30, 2010, at 11:13 PM, Andre Zepezauer wrote: > > > Hello all, > > > > what do you think of dropping the possibility to initialise CardOS smart > > cards in 0.11.14? The reason of doing so, is to stop the production of > >

Re: [opensc-devel] [Muscle] Re: pcscd access rights limitation and scard group

2010-08-31 Thread Andre Zepezauer
On Tue, 2010-08-31 at 21:07 +0200, Ludovic Rousseau wrote: > 2010/8/31 Peter Stuge : > > Johannes Findeisen wrote: > >> > I think it is important to pay attention to the original goal: to > >> > run pcscd as a normal user instead of root. > >> > >> Yep, that's what I want too. But, when running pcs

Re: [opensc-devel] [Muscle] Re: pcscd access rights limitation and scard group

2010-08-31 Thread Ludovic Rousseau
2010/8/31 Peter Stuge : > Johannes Findeisen wrote: >> > I think it is important to pay attention to the original goal: to >> > run pcscd as a normal user instead of root. >> >> Yep, that's what I want too. But, when running pcscd as normal >> user, this normal user need access to the device. Ok, y

Re: [opensc-devel] use algorithm_ref in set_security_env

2010-08-31 Thread Andre Zepezauer
On Tue, 2010-08-31 at 10:14 +0200, Viktor TARASOV wrote: > Andre Zepezauer wrote: > > On Mon, 2010-08-30 at 17:50 +0200, Viktor TARASOV wrote: > > > >> Hello, > >> > >> > >> Andre Zepezauer wrote: > >> > >>> Hello, > >>> > >>> attached is a patch which makes it possible to explicitly reques

Re: [opensc-devel] Problem with 2K keys and MyEID

2010-08-31 Thread Andre Zepezauer
On Tue, 2010-08-31 at 18:40 +0200, Viktor TARASOV wrote: > Andre Zepezauer wrote: > > On Mon, 2010-08-30 at 15:19 +0200, Viktor TARASOV wrote: > > > >> Aventra development wrote: > >> > >>> The 1K key generation works nicely, but we are having a problem > >>> generating a 2K key using Open

Re: [opensc-devel] Personal Review Of The Upcoming 0.12.0 Release

2010-08-31 Thread Jean-Michel Pouré - GOOZE
On Tue, 2010-08-31 at 14:06 +0200, Ludovic Rousseau wrote: > The Debian packaging files are available from [1] in the "general" > part. > The files are stored in a Git repository at > git://git.debian.org/git/pkg-opensc/opensc.git > Thanks. > Feel free to provide patches for the Debian packaging.

Re: [opensc-devel] Personal Review Of The Upcoming 0.12.0 Release

2010-08-31 Thread Ludovic Rousseau
Le 30 août 2010 14:52, Jean-Michel Pouré - GOOZE a écrit : > On Mon, 2010-08-30 at 13:42 +0300, Martin Paljak wrote: >> Providing "official unofficial" .deb and .rpm packages would be nice >> (as said in a previous e-mail). Feel free to work on that. > > Not sure. > > The availability of packages

[opensc-devel] new anti spam configuration

2010-08-31 Thread Andreas Jellinghaus
Hi everyone, we got some spam on our list, send by people using the list address as from: in smtp. I changed our email config to check the smtp sender address properly (valid host etc.) and also blacklisted our mailing lists as from address. I hope that works - reduces spam send to opensc and deli

Re: [opensc-devel] Problem with 2K keys and MyEID

2010-08-31 Thread Viktor TARASOV
Andre Zepezauer wrote: > On Mon, 2010-08-30 at 15:19 +0200, Viktor TARASOV wrote: > >> Aventra development wrote: >> >>> The 1K key generation works nicely, but we are having a problem >>> generating a 2K key using OpenSC 0.11.13 and our own MyEID card. >>> >>> OpenSC correctly finds a new

Re: [opensc-devel] [Muscle] Re: pcscd access rights limitation and scard group

2010-08-31 Thread Peter Stuge
Johannes Findeisen wrote: > > I think it is important to pay attention to the original goal: to > > run pcscd as a normal user instead of root. > > Yep, that's what I want too. But, when running pcscd as normal > user, this normal user need access to the device. Ok, you could > make it usable for

Re: [opensc-devel] Problem with 2K keys and MyEID

2010-08-31 Thread Andre Zepezauer
On Mon, 2010-08-30 at 15:19 +0200, Viktor TARASOV wrote: > Aventra development wrote: > > > > The 1K key generation works nicely, but we are having a problem > > generating a 2K key using OpenSC 0.11.13 and our own MyEID card. > > > > OpenSC correctly finds a new file id and creates the file, and

Re: [opensc-devel] Problem with 2K keys and MyEID

2010-08-31 Thread Viktor TARASOV
Martin Paljak wrote: > On Aug 30, 2010, at 4:19 PM, Viktor TARASOV wrote: > >> For me, to generate the 2048 bits key on the Aventra card, >> the following path was needed to be applied to the OpenSC trunk. >> >> If no objection, I'll commit this patch to trunk. >> > Do you know which change

Re: [opensc-devel] pcscd access rights limitation and scard group

2010-08-31 Thread Martin Paljak
On Aug 30, 2010, at 4:20 PM, Ludovic Rousseau wrote: > 2010/8/30 Martin Paljak : >> Hello, >> >> On Aug 30, 2010, at 12:19 PM, Ludovic Rousseau wrote: >>> As listed on the pcsc-lite TODO file [1] I would like to run pcscd as >>> a normal user instead of root. To do this I need to: >> Good idea.

Re: [opensc-devel] use algorithm_ref in set_security_env

2010-08-31 Thread Viktor TARASOV
Andre Zepezauer wrote: > On Mon, 2010-08-30 at 17:50 +0200, Viktor TARASOV wrote: > >> Hello, >> >> >> Andre Zepezauer wrote: >> >>> Hello, >>> >>> attached is a patch which makes it possible to explicitly request >>> specific algorithms for the cryptographic operations. The advantage is, >

Re: [opensc-devel] Problem with 2K keys and MyEID

2010-08-31 Thread Martin Paljak
On Aug 30, 2010, at 4:19 PM, Viktor TARASOV wrote: > > For me, to generate the 2048 bits key on the Aventra card, > the following path was needed to be applied to the OpenSC trunk. > > If no objection, I'll commit this patch to trunk. Do you know which changeset caused it? -- Martin Paljak @m

Re: [opensc-devel] Personal Review Of The Upcoming 0.12.0 Release

2010-08-31 Thread Martin Paljak
On Aug 30, 2010, at 5:16 PM, Andre Zepezauer wrote: > Possibly libksba could replace openssl in the future. It provides the > functionality required by opensc (certificate and public key handling) > but without the cryptographic operations. I haven't used it in the past, > therefore I can't tell y

Re: [opensc-devel] Problem with 2K keys and MyEID

2010-08-31 Thread Aventra development
Thanks Victor! No objections here, the patch looks good. br, Toni > -Original Message- > From: opensc-devel-boun...@lists.opensc-project.org [mailto:opensc-devel- > boun...@lists.opensc-project.org] On Behalf Of Viktor TARASOV > Sent: 30. elokuuta 2010 16:19 > Cc: 'OpenSC-devel' > Subject

Re: [opensc-devel] Initialisation of CardOS

2010-08-31 Thread Martin Paljak
Hello? On Aug 30, 2010, at 11:13 PM, Andre Zepezauer wrote: > Hello all, > > what do you think of dropping the possibility to initialise CardOS smart > cards in 0.11.14? The reason of doing so, is to stop the production of > more of these questionable split-key cards. What would be the rationale