[opensc-devel] Multiple certs on a MyEID card?

2011-02-11 Thread NdK
Hi all. I'm using a MyEID card (got a pack of 5 to test) on a GemPlus USB-SW reader. OpenSC is 0.12, from Mandriva Cooker (2011alpha) packages. If I init the card and load a single certificate (actually the one I use to authenticate on StartSSL.com) it's OK. I can even generate a 2048 bit key pa

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-11 Thread Andre Zepezauer
On Fri, 2011-02-11 at 15:16 -0600, Douglas E. Engert wrote: > > On 2/11/2011 3:02 PM, Andre Zepezauer wrote: > > On Fri, 2011-02-11 at 22:25 +0200, Martin Paljak wrote: > >> Furthermore, any cardmod adjustments can be implemented and isolated > >> with ifdef-s, > > > > The only #if

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-11 Thread Andre Zepezauer
On Fri, 2011-02-11 at 15:16 -0600, Douglas E. Engert wrote: > > On 2/11/2011 3:02 PM, Andre Zepezauer wrote: > > On Fri, 2011-02-11 at 22:25 +0200, Martin Paljak wrote: > >> Furthermore, any cardmod adjustments can be implemented and isolated > >> with ifdef-s, > > > > The only #if

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-11 Thread Douglas E. Engert
On 2/11/2011 3:02 PM, Andre Zepezauer wrote: > On Fri, 2011-02-11 at 22:25 +0200, Martin Paljak wrote: >> Furthermore, any cardmod adjustments can be implemented and isolated >> with ifdef-s, > > The only #ifdef ENABLED_CARDMOD left is in ctx, and that could easily be > remove

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-11 Thread Douglas E. Engert
On 2/11/2011 2:25 PM, Martin Paljak wrote: > > On Feb 11, 2011, at 9:47 PM, Douglas E. Engert wrote: >> On 2/11/2011 11:35 AM, Martin Paljak wrote: >>> >>> Didn't you include the sc_ctx_detect_readers realignment patch that removed >>> it from create context to the responsibility of calling appl

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-11 Thread Andre Zepezauer
On Fri, 2011-02-11 at 22:25 +0200, Martin Paljak wrote: > Furthermore, any cardmod adjustments can be implemented and isolated > with ifdef-s, > >>> > >>> The only #ifdef ENABLED_CARDMOD left is in ctx, and that could easily be > >>> removed as it tests the app_name for "cardmod" (The ca

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-11 Thread Douglas E. Engert
On 2/11/2011 2:19 PM, Andre Zepezauer wrote: > On Fri, 2011-02-11 at 14:06 -0600, Douglas E. Engert wrote: >> >> On 2/11/2011 11:43 AM, Martin Paljak wrote: >>> >>> On Feb 11, 2011, at 6:55 PM, Douglas E. Engert wrote: On 2/11/2011 3:24 AM, Martin Paljak wrote: > On Fri, Feb 4, 2011 at 0

[opensc-devel] engine_pkcs11 + apache patch

2011-02-11 Thread Marc Phillips
Wondered if anyone had an interest in using engine_pkcs11 with Apache. I have a working patch (it's not finished yet, but it works). I've been load testing it over time and it's performing nicely, no obvious memory leaks and my other test cases (using PEMs and engine chil still work normally). I'

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-11 Thread Martin Paljak
On Feb 11, 2011, at 9:47 PM, Douglas E. Engert wrote: > On 2/11/2011 11:35 AM, Martin Paljak wrote: >> >> Didn't you include the sc_ctx_detect_readers realignment patch that removed >> it from create context to the responsibility of calling application? (will >> check and include it otherwise)

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-11 Thread Andre Zepezauer
On Fri, 2011-02-11 at 14:06 -0600, Douglas E. Engert wrote: > > On 2/11/2011 11:43 AM, Martin Paljak wrote: > > > > On Feb 11, 2011, at 6:55 PM, Douglas E. Engert wrote: > >> On 2/11/2011 3:24 AM, Martin Paljak wrote: > >>> On Fri, Feb 4, 2011 at 01:19, Andre Zepezauer > >>>wrote: > >>> >

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-11 Thread Martin Paljak
On Feb 11, 2011, at 10:06 PM, Douglas E. Engert wrote: > On 2/11/2011 11:43 AM, Martin Paljak wrote: >> >> On Feb 11, 2011, at 6:55 PM, Douglas E. Engert wrote: >>> On 2/11/2011 3:24 AM, Martin Paljak wrote: On Fri, Feb 4, 2011 at 01:19, Andre Zepezauer wrote: > BTW: The ma

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-11 Thread Douglas E. Engert
On 2/11/2011 11:43 AM, Martin Paljak wrote: > > On Feb 11, 2011, at 6:55 PM, Douglas E. Engert wrote: >> On 2/11/2011 3:24 AM, Martin Paljak wrote: >>> On Fri, Feb 4, 2011 at 01:19, Andre Zepezauer >>>wrote: >>> BTW: The main handle in OpenSC is 'sc_pkcs15_card_t' and not 'sc_contex

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-11 Thread Martin Paljak
On Feb 11, 2011, at 9:10 PM, Andre Zepezauer wrote: > On Fri, 2011-02-11 at 11:24 +0200, Martin Paljak wrote: >> On Fri, Feb 4, 2011 at 01:19, Andre Zepezauer >> wrote: >> >>> BTW: The main handle in OpenSC is 'sc_pkcs15_card_t' and not >>> 'sc_context_t'. In fact 'sc_context_t' is really unimp

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-11 Thread Douglas E. Engert
On 2/11/2011 11:35 AM, Martin Paljak wrote: > > On Feb 11, 2011, at 6:39 PM, Douglas E. Engert wrote: ism :) >> >> There is still Brian's issue. He says he has a CSP or is it a mini-driver >> that can use OpenSC if sc_ctc_detect_readers is not called. He still has >> not said how he does it. Bria

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-11 Thread Andre Zepezauer
On Fri, 2011-02-11 at 11:24 +0200, Martin Paljak wrote: > On Fri, Feb 4, 2011 at 01:19, Andre Zepezauer > wrote: > > > BTW: The main handle in OpenSC is 'sc_pkcs15_card_t' and not > > 'sc_context_t'. In fact 'sc_context_t' is really unimportant. But > > sc_pkcs15_card_t holds all the operational

Re: [opensc-devel] Exec patch

2011-02-11 Thread Marc Phillips
> Is there any reason you can not use the ui_method and callback_data? I will take a look. Thanks. R. Marc ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-11 Thread Martin Paljak
On Feb 11, 2011, at 6:55 PM, Douglas E. Engert wrote: > On 2/11/2011 3:24 AM, Martin Paljak wrote: >> On Fri, Feb 4, 2011 at 01:19, Andre Zepezauer >> wrote: >> >>> BTW: The main handle in OpenSC is 'sc_pkcs15_card_t' and not >>> 'sc_context_t'. In fact 'sc_context_t' is really unimportant. But

Re: [opensc-devel] Exec patch

2011-02-11 Thread Douglas E. Engert
On 2/10/2011 7:09 PM, Marc Phillips wrote: > I'm in the process of getting engine_pkcs11 working with > Apache (2.2.17). In order to faciliate that, I needed to > enable a callout for unattended token login to engine_pkcs11. > > Here's what I've got for that. Constructive comments welcome > an

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-11 Thread Martin Paljak
On Feb 11, 2011, at 6:39 PM, Douglas E. Engert wrote: >> Platform adapters should be "core" of OpenSC. How they are bundled in >> terms of source packages or distributed as binaries is a different >> story. But conceptually they are "part of OpenSC", not "external >> applications". > > So based o

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-11 Thread Douglas E. Engert
On 2/11/2011 3:24 AM, Martin Paljak wrote: > On Fri, Feb 4, 2011 at 01:19, Andre Zepezauer > wrote: > >> BTW: The main handle in OpenSC is 'sc_pkcs15_card_t' and not >> 'sc_context_t'. In fact 'sc_context_t' is really unimportant. But >> sc_pkcs15_card_t holds all the operational state the is r

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-11 Thread Douglas E. Engert
On 2/11/2011 3:13 AM, Martin Paljak wrote: Hello, On Tue, Feb 8, 2011 at 22:42, Douglas E. Engert wrote: On 2/8/2011 1:29 PM, Andre Zepezauer wrote: Hello Douglas, please have a look at that picture [1]. FYI the cardmod resides on the same level as OpenSC.tokend does. As you can see, ther

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-11 Thread Martin Paljak
On Fri, Feb 4, 2011 at 01:19, Andre Zepezauer wrote: > BTW: The main handle in OpenSC is 'sc_pkcs15_card_t' and not > 'sc_context_t'. In fact 'sc_context_t' is really unimportant. But > sc_pkcs15_card_t holds all the operational state the is required to make > things working. Have a look at VENDO

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-11 Thread Martin Paljak
Hello, On Tue, Feb 8, 2011 at 22:42, Douglas E. Engert wrote: > On 2/8/2011 1:29 PM, Andre Zepezauer wrote: >> >> Hello Douglas, >> >> please have a look at that picture [1]. FYI the cardmod resides on the >> same level as OpenSC.tokend does. As you can see, there is a clear >> distinction betwee