Re: [opensc-devel] pam_pkcs11 with many certificates on a single token

2012-12-10 Thread Peter Stuge
frederic.comb...@cea.fr wrote: > Here is my patch (actually, 2 patches that depend if the patch > concerns only the error 2328 (patch 1) or the whole block > processing the return value of verify_certificate() (patch 2)). Patch 1 is obviously incorrect because your change is inside a conditional.

Re: [opensc-devel] STARCOS 3.0 cards with SafeSign Identity Client

2012-12-10 Thread Yonathan Randolph
Hi David. Sorry for the late reply; I was just searching my email for SafeSign and found yours. Coincidentally, I was testing a Crescendo C700 (3B:DF:18:FF:81:31:FE:45:80:59:01:80:48:49:44:43:37:30:30:73:00:01:1B:33) that was also initialized with SafeSign Identity Client. I couldn't figure out

Re: [opensc-devel] a few more trivial patches

2012-12-10 Thread Peter Stuge
Ludovic Rousseau wrote: > Merging a pull request from github adds a "merge pull request" commit. > The history is then not very nice (linear) but I don't know a better > way using the github web interface. It isn't neccessary to use the github web interface just because github is used to host the

Re: [opensc-devel] a few more trivial patches

2012-12-10 Thread Viktor Tarasov
Le 10/12/2012 17:10, Greg Troxel a écrit : > Anthony Foiani writes: > >> Ludovic, greetings -- >> >> On Sun, Dec 9, 2012 at 7:19 AM, Ludovic Rousseau >> wrote: >>> 2012/12/8 Anthony Foiani : Greetings -- I have two small patches which you might want to consider integrating. >>

Re: [opensc-devel] PIN login broken in 0.13.0rc1

2012-12-10 Thread Viktor Tarasov
Hello, Le 10/12/2012 17:46, Lukas Wunner a écrit : > I've issued pull request #111 which enhances pkcs15-gemsafeV1.c > by two features: Build of the merged repository for pull request #111 fails on Windows (Vista). You can reach the compilation logs of the failed jenkins job using the link in de

[opensc-devel] Muscle smart card Applet various versions from M.U.S.C.L.E. and OpenSC

2012-12-10 Thread Douglas E. Engert
I am not using the Muscle card applet, but was looking looking at the OpenSC debug log for this thread: Re: [opensc-devel] The smart card reader is known as "VMware Virtual USB CCID 00 00" in linux ??!! The OpenSC card-muscle.c (0.12.2 or 0.13.0) is looking for PROTO_VERSION_MAJOR=1 The author o

Re: [opensc-devel] The smart card reader is known as "VMware Virtual USB CCID 00 00" in linux ??!!

2012-12-10 Thread Douglas E. Engert
More on this. Looking at the trace you did send on 12/9/2012: line 418: 0x7fff706e5cc0 14:39:03.351 [pkcs15-tool] card.c:180:sc_connect_card: trying driver: muscle causes the muscle_match_card in card-muscle.c to try and select the muscle applet with APDU: 00 A4 04 00 05 A0 00 00 00 01 with resp

Re: [opensc-devel] PIN login broken in 0.13.0rc1

2012-12-10 Thread Douglas E. Engert
On 12/10/2012 10:46 AM, Lukas Wunner wrote: > Hi, > > I've issued pull request #111 which enhances pkcs15-gemsafeV1.c > by two features: > > > (1) Multiple key containers are now supported. > > Previously the code would only make the first certificate found > on the card available to th

Re: [opensc-devel] PIN login broken in 0.13.0rc1

2012-12-10 Thread Lukas Wunner
Hi, I've issued pull request #111 which enhances pkcs15-gemsafeV1.c by two features: (1) Multiple key containers are now supported. Previously the code would only make the first certificate found on the card available to the user. By reverse-engineering the USB communication of the

Re: [opensc-devel] a few more trivial patches

2012-12-10 Thread Greg Troxel
Anthony Foiani writes: > Ludovic, greetings -- > > On Sun, Dec 9, 2012 at 7:19 AM, Ludovic Rousseau > wrote: >> >> 2012/12/8 Anthony Foiani : >> > Greetings -- >> > >> > I have two small patches which you might want to consider integrating. >> > >> > (And given that I can't get git to do what I

Re: [opensc-devel] The smart card reader is known as "VMware Virtual USB CCID 00 00" in linux ??!!

2012-12-10 Thread Douglas E. Engert
On 12/9/2012 9:56 AM, Ludovic Rousseau wrote: > 2012/12/9 Rns Course : >> Another request of you: >> what's your opinion about windows version of opensc (0.12.2 or 0.13.0) and >> the problem "File not found" in pkcs15 initialization? Why use 0.13.0: o 0.13.0 has many more fixes. o You wil

Re: [opensc-devel] pam_pkcs11 with many certificates on a single token

2012-12-10 Thread frederic.combeau
Hello, Here is my patch (actually, 2 patches that depend if the patch concerns only the error 2328 (patch 1) or the whole block processing the return value of verify_certificate() (patch 2)). Thanks for your fast answer. Hope my patches could help, Regards, Frédéric Combeau. -Message d

Re: [opensc-devel] pam_pkcs11 with many certificates on a single token

2012-12-10 Thread Ludovic Rousseau
2012/12/10 : > Hello, Hello, > I use pam_pkcs11 0.6.8 with libcurl but without nss. My tokens works fine but > they can contain 4 or 5 certificates (with corresponding rsa keys). > > My certificates are not all from the same PKI, so they are not certified by > the same ACs. > > The problem I e

Re: [opensc-devel] Food for thought on C coding style

2012-12-10 Thread helpcrypto helpcrypto
Thanks a lot for this really interesting share. This will help me improve my code quality for sure! On Mon, Dec 10, 2012 at 11:26 AM, Martin Paljak wrote: > Hello, > > https://www.securecoding.cert.org/confluence/display/seccode/CERT+C+Secure+Coding+Standard > > Martin > _

[opensc-devel] pam_pkcs11 with many certificates on a single token

2012-12-10 Thread frederic.combeau
Hello, I use pam_pkcs11 0.6.8 with libcurl but without nss. My tokens works fine but they can contain 4 or 5 certificates (with corresponding rsa keys). My certificates are not all from the same PKI, so they are not certified by the same ACs. The problem I encounter with pam_pkcs11 is that if

Re: [opensc-devel] a few more trivial patches

2012-12-10 Thread Ludovic Rousseau
2012/12/10 Anthony Foiani : > Ludovic, greetings -- > > On Sun, Dec 9, 2012 at 7:19 AM, Ludovic Rousseau > wrote: >> >> 2012/12/8 Anthony Foiani : >> > Greetings -- >> > >> > I have two small patches which you might want to consider integrating. >> > >> > (And given that I can't get git to do what

[opensc-devel] Food for thought on C coding style

2012-12-10 Thread Martin Paljak
Hello, https://www.securecoding.cert.org/confluence/display/seccode/CERT+C+Secure+Coding+Standard Martin ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel

Re: [opensc-devel] a few more trivial patches

2012-12-10 Thread Anthony Foiani
Frank, greetings -- On Mon, Dec 10, 2012 at 12:23 AM, Frank Morgner wrote: > Your editor should be intelligent enough to guess the right settings. Why have the editor guess, when it could know the right answer? > For vim I recently found this plugin > http://www.vim.org/scripts/script.php?scrip