Re: [opensc-devel] Cryptotech Setcos card signing problem

2011-08-12 Thread TMS Brokers / Łukasz Kościesza
0xb7ad06c0 17:20:13.248 [opensc-pkcs11] apdu.c:184:sc_apdu_log: Outgoing APDU data [5 bytes] = 00 B0 01 00 00 . == 0xb7ad06c0 17:20:13.248 [opensc-pkcs11] reader-pcsc.c:176:pcsc_internal

Re: [opensc-devel] Cryptotech Setcos card signing problem

2011-08-12 Thread TMS Brokers / Łukasz Kościesza
0xb7ad06c0 17:20:12.324 [opensc-pkcs11] card.c:330:sc_unlock: called 0xb7ad06c0 17:20:12.324 [opensc-pkcs11] card.c:330:sc_unlock: called 0xb7ad06c0 17:20:12.324 [opensc-pkcs11] iso7816.c:320:iso7816_process_fci: processing FCI bytes 0xb7ad06c0 17:20:12.324 [opensc-pkcs11] iso7816.c:325:iso7816_pr

Re: [opensc-devel] Cryptotech Setcos card signing problem

2011-08-12 Thread TMS Brokers / Łukasz Kościesza
OK, I'm attaching the log file: And I was able to sniff USB communication with card reader with native windows middleware for comparition: 01 A0 00 07 -> 00 A4 08 00 02 DF 01 01 00 00 02 <- 61 22 01 A0 00 05 -> 00 C0 00 00 22 01 00 00 24 -> (40 bytes - some id?) 01 A0 00 05 -> 00 20 00 81 00 01 00

Re: [opensc-devel] libp11 & engine_pkcs11 support for ECDSA keys

2011-08-12 Thread Douglas E. Engert
No it has not been incorporated because it requires an OpenSSL internal header file ecs_locl.h, thus making it impractical to compile in to any package. This is a known bug: http://rt.openssl.org/Ticket/Display.html?id=2459&user=guest&pass=guest It also appeared on the OpenSSL mailing list. The

Re: [opensc-devel] PIN caching problems with pkcs11-helper 1.08

2011-08-12 Thread Alon Bar-Lev
Jonatan, Can you please try the attached patch and see if it helps? Thanks! On Thu, Aug 11, 2011 at 11:20 AM, Alon Bar-Lev wrote: > > Martin, > > The openssl engine is called with 0x24 buffer size and expect it to be > encrypted by private key with same length. > > Prototype: > --- > static > int

[opensc-devel] libp11 & engine_pkcs11 support for ECDSA keys

2011-08-12 Thread Felipe Blauth
Hello. I've started using engine_pkcs11 to access PKCS #11 tokens from OpenSSL EVP_PKEY's trough "ENGINE_load__key" methods. It works very well with RSA keys, but it doesn't recognize ECDSA keys. Searching trough the web, I've found that Douglas had a patch for it at http://www.mail-archive.com/o

Re: [opensc-devel] RAAK Technologies card and SCM reader support in opensc

2011-08-12 Thread Ludovic Rousseau
2011/8/12 Puneet Khunteta : > Hi All, Hello, > I want to know that is opensc support the Raak Technology smart card with > scm  SCR331 reader? > i used opensc-tool application to verify it . The reader is listed but not > able get the ATR of the card. You should at least get the ATR Please foll

[opensc-devel] RAAK Technologies card and SCM reader support in opensc

2011-08-12 Thread Puneet Khunteta
Hi All, I want to know that is opensc support the Raak Technology smart card with scm SCR331 reader? i used opensc-tool application to verify it . The reader is listed but not able get the ATR of the card. Regards, PuneetK. ___ opensc-devel mailing lis

Re: [opensc-devel] Cryptotech Setcos card signing problem

2011-08-12 Thread Viktor Tarasov
Hello, Le 12/08/2011 14:05, TMS Brokers / Łukasz Kościesza a écrit : > > Hi all, > > I’m trying to sign a file using compiled from sources opensc 12.2. > > Card is manufactured by Cryptotech and it has setcos 4.1.1 on board. > > The card was initialized by www.sigillum.pl

Re: [opensc-devel] Cryptotech Setcos card signing problem

2011-08-12 Thread Douglas E. Engert
Developers, Could this be a card that is enforcing user_consent. i.e. CKA_ALWAYS_AUTHENTICATIE and the pkcs11-tool is not doing this? The one card I know that does enforce it (newewr PIV cards), requires the sign operation to be preceeded immediatley by the presentation of the pin. Łukasz, Can

Re: [opensc-devel] Cryptotech Setcos card signing problem

2011-08-12 Thread TMS Brokers / Łukasz Kościesza
I use pkcs11-tool pkcs11-tool --module /usr/lib/opensc-pkcs11.so --sign --slot 1 -m RSA-PKCS --input-file file.txt --output-file signature.txt --pin my_pin It's sending the PIN to the card (I can see it in APDU log a little bit earlier in logs). If I enter wrong PIN it's failing, so it also che

Re: [opensc-devel] Cryptotech Setcos card signing problem

2011-08-12 Thread Douglas E. Engert
It looks like you did not logon to the card. Did the program ever ask for the pin? What program are you using? On 8/12/2011 7:05 AM, TMS Brokers / Łukasz Kościesza wrote: > Hi all, > > I’m trying to sign a file using compiled from sources opensc 12.2. > > Card is manufactured by Cryptotech and

[opensc-devel] Cryptotech Setcos card signing problem

2011-08-12 Thread TMS Brokers / Łukasz Kościesza
Hi all, I'm trying to sign a file using compiled from sources opensc 12.2. Card is manufactured by Cryptotech and it has setcos 4.1.1 on board. The card was initialized by www.sigillum.pl company. Even though PIN is fine and there are no failures in the card reading process

Re: [opensc-devel] Java and pkcs11

2011-08-12 Thread Andreas Schwier (ML)
The latest OCF package at [1] has support for smartcardio - so if you need more than just the APDU interface. Andreas [1] http://www.openscdp.org/ocf/download.html Am 12.08.2011 12:11, schrieb resoli - libero: > Il giorno mer, 10/08/2011 alle 08.36 +0200, NdK ha scritto: >> On 09/08/2011 20:48,

Re: [opensc-devel] Java and pkcs11

2011-08-12 Thread resoli - libero
Il giorno mer, 10/08/2011 alle 08.36 +0200, NdK ha scritto: > On 09/08/2011 20:48, Vlastimil Pavicek wrote: > > I haven't read the whole thread, but you might find this library useful (it > > is easier to use than JNI/JNA): > > http://jce.iaik.tugraz.at/sic/Products/Core-Crypto-Toolkits/PKCS-11-Wr