Re: [opensc-devel] Status of PINPAD support in OpenSC / libccid

2011-11-09 Thread Ludovic Rousseau
2011/11/8 Frank Morgner morg...@informatik.hu-berlin.de: Hi! Hello, I wrote a patch for libccid to support PACE. Due to a lack of standardization on the USB level there is only my ccid-emulator, which can be used with this feature. See http://sourceforge.net/projects/vsmartcard/ for the

Re: [opensc-devel] Status of PINPAD support in OpenSC / libccid

2011-11-09 Thread Frank Morgner
Hi! Actually PACE is executed with SCardControl. The current implementation for control commands in OpenSC would not allow executing PACE, because reader-pcsc.c:237 always encodes an APDU. This is OK if you are only using PIN verification/modification (which require an encoded APDU). But

Re: [opensc-devel] Status of PINPAD support in OpenSC / libccid

2011-11-09 Thread Ludovic Rousseau
2011/11/9 Frank Morgner morg...@informatik.hu-berlin.de: Hi! Actually PACE is executed with SCardControl. The current implementation for control commands in OpenSC would not allow executing PACE, because reader-pcsc.c:237 always encodes an APDU. This is OK if you are only using PIN

[opensc-devel] About OpenSC PKCS#11

2011-11-09 Thread Viktor Tarasov
Hello, I would like to 'touch' the PKCS#11 module of OpenSC and looking for your opinions/suggestions about: - removing of 'pkcs15init' framework; - configurable support of the multi on-card applications and multi-pins; - removing the 'one-pin' version of pkcs#11 module (or rather replacing it

Re: [opensc-devel] Status of PINPAD support in OpenSC / libccid

2011-11-09 Thread Frank Morgner
Hi! Ah yes, I forgot about that. It's already long ago... Anyway, the idea of sc_transmit_bytes has been given up in favor of sc_bytes2apdu, since all the opensc tools do not want to send an arbitrary buffer but an apdu. Will you propose a new patch? Do you need to use

Re: [opensc-devel] About OpenSC PKCS#11

2011-11-09 Thread Douglas E. Engert
On 11/9/2011 11:39 AM, Viktor Tarasov wrote: Hello, I would like to 'touch' the PKCS#11 module of OpenSC and looking for your opinions/suggestions about: - removing of 'pkcs15init' framework; Would you keep the functionality of the pkcs15init, and support it with the pkcs15 framework?

[opensc-devel] how can I retrieve private key by using pkcs11-helper api?

2011-11-09 Thread weizhong qiang
hi all, I tried to use pkcs11-helper api to retrieve X509 and private key from nss softtoken, wit the 1.09 version of pkcs11-helper. I can get X509 object, but the returned RSA object only includes public key, rather than private key. I paste the code as the following. Could anyone give me some