On 17.03.2011 16:14, Felipe Blauth wrote:
> Hello everyone,
>
> Currently, I'm having some trouble with usage of starcos spk 2.4 cards and
> opensc. I used to have no problem, and I don't know where exactly the problem
> is.
>
> Here what's happening:
> I have an aplicattion that use's pkcs15-init to initialize cards and then it
> codes directly against PKCS#11 API (and opensc-pkcs11.so module) to use the
> card (generete keys, sign, etc). I have no problems with the initialization
> (I use system calls):
>
> #pkcs15-init -C (ok)
> #pkcs15-init --store-pin --auth-id 01 --label some-label (ok)
>
> And then, if I try to generate keys through PKCS#11 API (with
> C_GenerateKeyPair), I get CKR_GENERAL_ERROR. The weird thing is that
> everything used to work in the past =p.
> Also, if I try to generate keys using pkcs11-tool, I get the same error. For
> example, if I do:
> #pkcs11-tool --login -k (error: PKCS11 function C_GenerateKeyPair failed: rv
> = CKR_GENERAL_ERROR (0x5))
>
> On the other side, if I use pkcs15-init to generate a key pair:
> #pkcs15-init -G rsa/1024 --auth-id ff --label "My Private Key"
> --public-key-label "My Public Key"
> It does generate the key-pair. However, if I try to do something with
> pkcs11-tool, with the generated key, like
A bit strange, you are generating key with the reference to SOPIN ('--auth-id
FF') .
You have created User PIN with the reference '--auth-id 01' and you should use
this one.
> #pkcs11-tool --sign -i i_file -o signature
> I get the following erros:
...
> error: PKCS11 function C_SignFinal failed: rv = CKR_USER_NOT_LOGGED_IN (0x101)
Probably can be explained by the fact that the private key do not references
the 'User PIN' authentication object.
If problem persists, please, send us the logs with the debug level > 8 .
Kind wishes,
Viktor.
>
> _______________________________________________
> opensc-devel mailing list
> opensc-devel@lists.opensc-project.org
> http://www.opensc-project.org/mailman/listinfo/opensc-devel
--
Viktor Tarasov <viktor.tara...@opentrust.com>
_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel
