Re: [opensc-devel] Bug in engine_pkcs11

2011-05-10 Thread Martin Paljak
On May 10, 2011, at 15:38 , Alon Bar-Lev wrote: > On Tue, May 10, 2011 at 1:18 PM, Giuliano Bertoletti wrote: >> I pointed out the slot_id matter instead because it is just wrong to start >> from the assumption that the user knows it and it won't change between >> multiple executions. > > Same

Re: [opensc-devel] Bug in engine_pkcs11

2011-05-10 Thread Giuliano Bertoletti
Hello Alon, Il 10/05/2011 18.13, Alon Bar-Lev ha scritto: > Last message in this thread, as I think nothing is wrong and you try > to tweak implementation to suit your needs. > > Your assumption that only administrator is responsible for slot > management is totally wrong. > > 1 Every USB reader

Re: [opensc-devel] Bug in engine_pkcs11

2011-05-10 Thread Alon Bar-Lev
Last message in this thread, as I think nothing is wrong and you try to tweak implementation to suit your needs. Your assumption that only administrator is responsible for slot management is totally wrong. 1 Every USB reader that is unplugged/plugged by user will most probably result in a new slo

Re: [opensc-devel] Windows Smart Card Logon issue with OpenSC 12.1 RC1 & Athena ASEPCOS card

2011-05-10 Thread Douglas E. Engert
On 5/10/2011 8:38 AM, HOURY William wrote: > Dear all, > > I’m trying to use the minidriver delivered with OpenSC 12.1 RC1 in order to > perform Smartcard logon on a XP or 2008 PC. So far, it’s not fully successful. > > I have personalized my card using the following commands: > - pkcs15-init -C

Re: [opensc-devel] Bug in engine_pkcs11

2011-05-10 Thread Giuliano Bertoletti
Hello Alon, I still disagree. Despite the fact that slots can (in certain tokens) be added or removed by the administrator, such person is supposed to have complete control over what happens. Acessing a slot/token makes perfect sense from a user/administrator standpoint, although adding or r

[opensc-devel] Windows Smart Card Logon issue with OpenSC 12.1 RC1 & Athena ASEPCOS card

2011-05-10 Thread HOURY William
Dear all, I’m trying to use the minidriver delivered with OpenSC 12.1 RC1 in order to perform Smartcard logon on a XP or 2008 PC. So far, it’s not fully successful. I have personalized my card using the following commands: - pkcs15-init -C -T - pkcs15-init -P --auth-id 01 - pkcs15-init -X c:\log

Re: [opensc-devel] Bug in engine_pkcs11

2011-05-10 Thread Alon Bar-Lev
Use this[1] to build using cross compiler. [1] https://www.opensc-project.org/build On Tue, May 10, 2011 at 10:36 AM, Giuliano Bertoletti wrote: > > Hello, > > unfortunatelly I'm still fighting with the compiler to rebuild the > engine_pkcs11 library (under Windows / Mingw or Visual C++). > Once

Re: [opensc-devel] Bug in engine_pkcs11

2011-05-10 Thread Alon Bar-Lev
On Tue, May 10, 2011 at 1:18 PM, Giuliano Bertoletti wrote: > I pointed out the slot_id matter instead because it is just wrong to start > from the assumption that the user knows it and it won't change between > multiple executions. Same for index. Sorry, I still cannot see your point. Had you ar

Re: [opensc-devel] Bug in engine_pkcs11

2011-05-10 Thread Giuliano Bertoletti
Hello Nikos, Il 10/05/2011 11.23, Nikos Mavrogiannopoulos ha scritto: > On Tue, May 10, 2011 at 9:40 AM, Giuliano Bertoletti wrote: > > And this is exactly the reason why they shouldn't be used for object > identification and usage (the typical use-case of PKCS #11). > I partially agree, but con

Re: [opensc-devel] Bug in engine_pkcs11

2011-05-10 Thread Nikos Mavrogiannopoulos
On Tue, May 10, 2011 at 9:40 AM, Giuliano Bertoletti wrote: > Hello Nikos, > just a few notes. > The pkcs#11 standard adresses cryptographic devices in general, not only > smart-cards which might (or might not) have a single slot. > Cryptographic devices such HSMs are capable of supporting many ma

Re: [opensc-devel] Bug in engine_pkcs11

2011-05-10 Thread Nikos Mavrogiannopoulos
On Mon, May 9, 2011 at 9:53 PM, Alon Bar-Lev wrote: > This is a matter of interpretation. > Either is not constant and user is not suppose to know of. > Apart of the special case of having a single slot, so you expect 0 I presume. > You can check which slot is what simply by using: > pkcs11-tool -

Re: [opensc-devel] Bug in engine_pkcs11

2011-05-10 Thread Giuliano Bertoletti
Hello Nikos, just a few notes. The pkcs#11 standard adresses cryptographic devices in general, not only smart-cards which might (or might not) have a single slot. Cryptographic devices such HSMs are capable of supporting many many slots. Slot can also be added and removed at wish. They're use

Re: [opensc-devel] Bug in engine_pkcs11

2011-05-10 Thread Giuliano Bertoletti
Hello, unfortunatelly I'm still fighting with the compiler to rebuild the engine_pkcs11 library (under Windows / Mingw or Visual C++). Once I get it to work, I would be happy to supply the patch (shouldn't take too long to patch). To be more accurate I cannot link the OpenSSL libraries to libp

Re: [opensc-devel] Bug in engine_pkcs11

2011-05-10 Thread Martin Paljak
Hello, On May 10, 2011, at 10:02 , Giuliano Bertoletti wrote: > >> A list of CK_SLOT_IDs is returned by C_GetSlotList. A priori, any value of >> CK_SLOT_ID can be a valid slot identifier—in particular, a system may >> have a slot >> identified by the value 0. It need not have such a slot, howe

Re: [opensc-devel] Bug in engine_pkcs11

2011-05-10 Thread Giuliano Bertoletti
Hello Alon, I respectfully disagree. The slot_id is to be considered no more and no less than an handle returned by the pkcs#11 library in the eyes of the caller (although such handle must never be closed or freed). The application has no right to guess it's value, in the same sense you canno