Re: [opensc-devel] emulation dll for DNIe

2011-02-07 Thread Andre Zepezauer
On Tue, 2011-02-08 at 03:16 +0100, Juan Antonio Martinez wrote: > El lun, 07-02-2011 a las 23:58 +0100, Andre Zepezauer escribió: > > On Fri, 2011-02-04 at 23:31 +0100, Juan Antonio Martinez wrote: > > > About visibility of certificates and keys patch, notice that > > > DNIe requires the user to e

Re: [opensc-devel] emulation dll for DNIe

2011-02-07 Thread Juan Antonio Martinez
El lun, 07-02-2011 a las 23:58 +0100, Andre Zepezauer escribió: > On Fri, 2011-02-04 at 23:31 +0100, Juan Antonio Martinez wrote: > > About visibility of certificates and keys patch, notice that > > DNIe requires the user to enter pin for just read (neither > > signature nor authentication) user c

Re: [opensc-devel] emulation dll for DNIe

2011-02-07 Thread Andre Zepezauer
On Fri, 2011-02-04 at 23:31 +0100, Juan Antonio Martinez wrote: > About visibility of certificates and keys patch, notice that > DNIe requires the user to enter pin for just read (neither > signature nor authentication) user certificates. It's not > standard, I know, but seems to be a very common

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-07 Thread Andre Zepezauer
On Mon, 2011-02-07 at 16:00 -0600, Douglas E. Engert wrote: > >> Attached is a patch that implements a sc_ctx_use_reader, to pass in two > >> void > >> pointers to an underling driver. The code to use this from cardmod.c to the > >> cardmod code in reader-pcsc.c (or where ever it ends up) will be

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-07 Thread Douglas E. Engert
On 2/7/2011 3:05 PM, Andre Zepezauer wrote: > On Mon, 2011-02-07 at 14:27 -0600, Douglas E. Engert wrote: >> >> On 2/7/2011 11:26 AM, Douglas E. Engert wrote: >>> >>> >>> On 2/3/2011 11:58 PM, Martin Paljak wrote: On Feb 3, 2011, at 10:04 PM, Douglas E. Engert wrote: I would c

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-07 Thread Andre Zepezauer
On Mon, 2011-02-07 at 14:27 -0600, Douglas E. Engert wrote: > > On 2/7/2011 11:26 AM, Douglas E. Engert wrote: > > > > > > On 2/3/2011 11:58 PM, Martin Paljak wrote: > >> > >> On Feb 3, 2011, at 10:04 PM, Douglas E. Engert wrote: > >> > >> I would consider using a new hook, like "use_reader" or

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-07 Thread Douglas E. Engert
On 2/7/2011 11:26 AM, Douglas E. Engert wrote: On 2/3/2011 11:58 PM, Martin Paljak wrote: On Feb 3, 2011, at 10:04 PM, Douglas E. Engert wrote: I would consider using a new hook, like "use_reader" or "use_pcsc_parameters" to send the arguments to reader-pcsc.c and set the (pcsc, not card

Re: [opensc-devel] Feitian PKI speed

2011-02-07 Thread Jean-Michel Pouré - GOOZE
Le lundi 07 février 2011 à 15:27 +0100, Ludovic Rousseau a écrit : > It looks like bad news for me. > A prime number generator in constant time is _very_ suspect. Don't be suspicious, the Feitian PKI is a fast card. -- Jean-Michel Pouré - Gooze - http://www.gooze.eu _

Re: [opensc-devel] Feitian PKI speed

2011-02-07 Thread Jean-Michel Pouré - GOOZE
Le lundi 07 février 2011 à 17:25 +0100, Peter Stuge a écrit : > Maybe more extensive testing could be done. Higher precision timing, > and say 1000 or 1 cycles. Okay, I understand what you mean. Timing is different and depends. But in no way the generation reaches 2m38. If generation time d

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-07 Thread Andre Zepezauer
On Mon, 2011-02-07 at 11:32 -0600, Douglas E. Engert wrote: > > On 2/4/2011 2:20 AM, Martin Paljak wrote: > > > I think Douglas is incrementally working on the existing codebase. Why the > > cardmod > > driver was squeezed into reader-pcsc.c the way it is in the first place is > beyond > > me

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-07 Thread Douglas E. Engert
On 2/4/2011 2:20 AM, Martin Paljak wrote: > I think Douglas is incrementally working on the existing codebase. Why the > cardmod > driver was squeezed into reader-pcsc.c the way it is in the first place is > beyond > me, as Francois noted, I "was not very hot about it" [1]. > Yes, I am try

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-07 Thread Douglas E. Engert
On 2/3/2011 11:58 PM, Martin Paljak wrote: > > On Feb 3, 2011, at 10:04 PM, Douglas E. Engert wrote: > > I would consider using a new hook, like "use_reader" or > "use_pcsc_parameters" to > send the arguments to reader-pcsc.c and set the (pcsc, not cardmod) driver to > "cardmod state". The read

Re: [opensc-devel] Useful OpenSSL commands for debugging

2011-02-07 Thread Douglas E. Engert
On 2/7/2011 2:48 AM, Jean-Michel Pouré - GOOZE wrote: > Le dimanche 06 février 2011 à 22:38 +0100, Peter Stuge a écrit : >> You would have to explain what the problem is. :) > > I am having a problem with CAcerts certificates containing > an SSO ID in the email field: > http://www.opensc-project.

Re: [opensc-devel] [opensc-commits] svn opensc changed[5185] Revert r5137, because size_t is defined as unsigned integer type ( without further qualification).

2011-02-07 Thread Peter Stuge
Dan Lukes wrote: > > Andreas Jellinghaus wrote: > >> hmm, can you > >> #ifdef WIN32 > >> #define %size_t %Iu > >> #else > >> #define %size_t %zu > >> #endif > > > > #define PCT_SIZE_T "%lu" and "%zu" could work I guess. > > If you mean "define PCT_SIZE_T %lu on Windows, %zu otherwise", No, I don'

Re: [opensc-devel] Feitian PKI speed

2011-02-07 Thread Peter Stuge
Ludovic Rousseau wrote: > >> Can you do this script, let's say 10 times, and give a mean value, a > >> min and a max value? The RSA key generation time is usually (highly) > >> variable. > > > > I ran it 10 times already and it pretty stable around these values. > > It looks like bad news for me.

Re: [opensc-devel] Bug in src/tools/piv-tool.c

2011-02-07 Thread Douglas E. Engert
On 2/5/2011 4:31 PM, Ludovic Rousseau wrote: > Hello, > > My compiler (gcc 4.2.1) complains with: > > piv-tool.c: In function ‘main’: > piv-tool.c:347: warning: ‘x’ is used uninitialized in this function > piv-tool.c:335: note: ‘x’ was declared here > piv-tool.c:348: warning: ‘y’ is used uninitia

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-07 Thread Douglas E. Engert
On 2/7/2011 7:24 AM, Brian Thomas wrote: > Hello again, > > Sorry I've been mute lately, I've been away on travel. What's the > status on the cardmod patch? It looks like there's a new version which > was sent out on Friday, I will have my software team try this out. Is > it still the intent t

Re: [opensc-devel] Feitian PKI speed

2011-02-07 Thread Ludovic Rousseau
Le 7 février 2011 14:55, Jean-Michel Pouré - GOOZE a écrit : > Le lundi 07 février 2011 à 13:36 +0100, Jean-Pierre Szikora a écrit : >> Can you do this script, let's say 10 times, and give a mean value, a >> min and a max value? The RSA key generation time is usually (highly) >> variable. > > I ra

Re: [opensc-devel] Feitian PKI speed

2011-02-07 Thread Jean-Michel Pouré - GOOZE
Le lundi 07 février 2011 à 13:36 +0100, Jean-Pierre Szikora a écrit : > Can you do this script, let's say 10 times, and give a mean value, a > min and a max value? The RSA key generation time is usually (highly) > variable. I ran it 10 times already and it pretty stable around these values. --

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-07 Thread Brian Thomas
Hello again, Sorry I've been mute lately, I've been away on travel. What's the status on the cardmod patch? It looks like there's a new version which was sent out on Friday, I will have my software team try this out. Is it still the intent to provide this patch in an official bug release versio

Re: [opensc-devel] [opensc-commits] svn opensc changed[5185] Revert r5137, because size_t is defined as unsigned integer type ( without further qualification).

2011-02-07 Thread Dan Lukes
On 02/07/11 13:08, Peter Stuge: > Andreas Jellinghaus wrote: >> hmm, can you >> #ifdef WIN32 >> #define %size_t %Iu >> #else >> #define %size_t %zu >> #endif > > #define PCT_SIZE_T "%lu" and "%zu" could work I guess. If you mean "define PCT_SIZE_T %lu on Windows, %zu otherwise", then I think the

Re: [opensc-devel] Feitian PKI speed

2011-02-07 Thread Jean-Pierre Szikora
Hi Jean-Michel, Can you do this script, let's say 10 times, and give a mean value, a min and a max value? The RSA key generation time is usually (highly) variable. Cheers, Jean-Pierre Le 7 févr. 2011 à 12:43, Jean-Michel Pouré - GOOZE a écrit : > Dear all, > > I just modified this page! > ht

Re: [opensc-devel] [opensc-commits] svn opensc changed[5185] Revert r5137, because size_t is defined as unsigned integer type ( without further qualification).

2011-02-07 Thread Peter Stuge
Andreas Jellinghaus wrote: > hmm, can you > #ifdef WIN32 > #define %size_t %Iu > #else > #define %size_t %zu > #endif #define PCT_SIZE_T "%lu" and "%zu" could work I guess. //Peter ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org htt

Re: [opensc-devel] [opensc-commits] svn opensc changed[5185] Revert r5137, because size_t is defined as unsigned integer type ( without further qualification).

2011-02-07 Thread Andreas Jellinghaus
Am Sonntag 06 Februar 2011, um 20:23:59 schrieb Ludovic Rousseau: > 2011/2/6 : > > Revision: 5185 > > Author: andre > > Date: 2011-02-06 17:28:30 + (Sun, 06 Feb 2011) > > > > Log Message: > > --- > > Revert r5137, because size_t is defined as unsigned integer type (without > > f

Re: [opensc-devel] Canonical mailing list address

2011-02-07 Thread Andreas Jellinghaus
Am Sonntag 06 Februar 2011, um 20:29:49 schrieb Ludovic Rousseau: > I just got catch by this configuration "bug". > > Mails sent to opensc-de...@opensc-project.org are rejected. So > replying to a opensc-commit mail will generate a mail error. > > The opensc-commit Reply-To: header need to be fix

Re: [opensc-devel] Canonical mailing list address

2011-02-07 Thread Andreas Jellinghaus
Am Samstag 15 Januar 2011, um 00:21:45 schrieb Lionel Elie Mamane: > Then please change the Reply-To of the opensc-commit mailing > list... Commit messages come with > > Reply-To: opensc-de...@opensc-project.org, > opensc-devel@lists.opensc-project.org > > Messages sent by humans seem to

[opensc-devel] Feitian PKI speed

2011-02-07 Thread Jean-Michel Pouré - GOOZE
Dear all, I just modified this page! http://www.opensc-project.org/opensc/wiki/FTCOSPK01C Previous information: == Speed == * RSA 1024 key generation: 0m14.139s * RSA 2048 key generation: 2m38.891s My own test shows: == Speed == Initialisation: 3 s RSA 1024: 10 s RSA 2048: 67 s So I modified ke

Re: [opensc-devel] Useful OpenSSL commands for debugging

2011-02-07 Thread Jean-Michel Pouré - GOOZE
Le dimanche 06 février 2011 à 22:38 +0100, Peter Stuge a écrit : > You would have to explain what the problem is. :) I am having a problem with CAcerts certificates containing an SSO ID in the email field: http://www.opensc-project.org/opensc/ticket/324 Firefox and OpenSSH + opensc-pkcs11.so fai