Re: [opensc-devel] opensc-pkcs11.so displaying certs differently?since opensc 0.11.10?

2010-02-16 Thread Christian Horn
Found some time to look at this again, was working with opensc 0.11.9 last days in my setup here. On Thu, Feb 04, 2010 at 11:23:20AM +0100, Andreas Jellinghaus wrote: > Am Donnerstag 04 Februar 2010 10:20:37 schrieb Christian Horn: > > > Also the nonworking opensc-rev hands out my

Re: [opensc-devel] opensc-pkcs11.so displaying certs differently?since opensc 0.11.10?

2010-02-04 Thread Christian Horn
On Thu, Feb 04, 2010 at 10:01:43AM +0100, Andreas Jellinghaus wrote: > > chistian: you could post a "pkcs15-tool --dump" to show in detail > how the card looks like. http://fluxcoil.net/files/openscdebug/pkcs15-tool_dump_ok That output is the same for working/nonworking opensc revision. Also the

Re: [opensc-devel] opensc-pkcs11.so displaying certs differently since opensc 0.11.10?

2010-02-03 Thread Christian Horn
On Wed, Feb 03, 2010 at 04:46:02PM +0100, Andreas Jellinghaus wrote: > Am Mittwoch 03 Februar 2010 16:02:22 schrieb Christian Horn: > > > pinned down to rev3784, thats the last one working. > > doesn't help much. 3785 is a huge merge of trunk into branches/martin/0.1

Re: [opensc-devel] opensc-pkcs11.so displaying certs differently since opensc 0.11.10?

2010-02-03 Thread Christian Horn
On Wed, Feb 03, 2010 at 10:56:01AM +0100, Andreas Jellinghaus wrote: > > if opensc 0.11.12 doesn't work, does an older version of opensc work? 0.11.9 works, 0.11.10 is broken for this. pinned down to rev3784, thats the last one working. Ontop everything but 3 files can be applied to still have it

Re: [opensc-devel] opensc-pkcs11.so displaying certs differently since opensc 0.11.10?

2010-02-03 Thread Christian Horn
On Wed, Feb 03, 2010 at 12:04:11PM +0200, Martin Paljak wrote: > On Feb 3, 2010, at 11:15 , Christian Horn wrote: > > > > i use strongswan ontop of opensc to authenticate to firewalls for vpn- > > connections. > > All strongswan-versions have problems using opensc-pk

[opensc-devel] opensc-pkcs11.so displaying certs differently since opensc 0.11.10?

2010-02-03 Thread Christian Horn
Hi, i use strongswan ontop of opensc to authenticate to firewalls for vpn- connections. All strongswan-versions have problems using opensc-pkcs11.so of opensc after rev3784 to authenticate with the firewall. opensc 0.11.12 also doesnt work. Installing rev3784 i can establish the connection, with

Re: [opensc-devel] Re: [Muscle] Live CD with smart card tools

2006-12-29 Thread Christian Horn
On Thu, Dec 28, 2006 at 08:42:03PM +0100, Ludovic Rousseau wrote: > On 28/12/06, Damien Sauveron <[EMAIL PROTECTED]> wrote: > >- pcsc-lite > >- generic ccid driver > >- other drivers for other readers > >- GlobalPlatform library and GPShell > >- pcsc-perl > >- pcsc-tools > >- Muscle > >- openSC > >

Re: [opensc-devel] new pages for software list etc?

2006-11-28 Thread Christian Horn
On Mon, Nov 27, 2006 at 05:35:30PM +0200, Alon Bar-Lev wrote: > 1. You don't expect application to require the user to store the PIN > hard coded in configuration file... > [...] > 3. If the user removes and inserts his card, the application should > reprompt for PIN when private object is accesse

Re: [opensc-devel] new pages for software list etc?

2006-11-28 Thread Christian Horn
On Sun, Nov 26, 2006 at 11:19:04PM +0100, Andreas Jellinghaus wrote: > list > each software, describe what it does, link to it etc? maybe also > list which distribution ships what (currently we track that > in some wikis in the OperatingSystem page). Would be nice, but keeping track of versions tha

Re: [opensc-devel] Netkey-card with multiple certs per private key

2006-11-10 Thread Christian Horn
Hi, On Tue, Oct 31, 2006 at 07:11:19PM +0100, Andreas Steffen wrote: > Try strongSwan from http://www.strongswan.org which has a regular > PKCS#11 smartcard interface and allows to select certificates > according to position e.g. > > leftcert=%smartcard#4 > > which is the fourth certificate in

Re: [opensc-devel] Netkey-card with multiple certs per private key

2006-10-31 Thread Christian Horn
On Mon, Oct 30, 2006 at 10:52:03PM +0100, Peter Koch wrote: > > Sounds like a nice solution, but its currently not implemented: > > the certs with id 47 are looked up in files df01c200 and df0143b1 > > so OpenSwan grabs the first one but i need the latter one. > > It was a suggestion only. Seems t

Re: [opensc-devel] Netkey-card with multiple certs per private key

2006-10-31 Thread Christian Horn
Hi, On Mon, Oct 30, 2006 at 10:52:03PM +0100, Peter Koch wrote: > I like to hear from people that use my TCOS emulation :-) Some people use it here, with the modification we can use stock OpenSC, OpenCT/pcscd and have only to patch one application. > > Sounds like a nice solution, but its curren

Re: [opensc-devel] Netkey-card with multiple certs per private key

2006-10-30 Thread Christian Horn
On Sun, Oct 29, 2006 at 03:35:54PM +0100, Christian Horn wrote: > > Sounds like a nice solution, but its currently not implemented: > the certs with id 47 are looked up in files df01c200 and df0143b1 > so OpenSwan grabs the first one but i need the latter one. A patch like the one at

[opensc-devel] Netkey-card with multiple certs per private key

2006-10-29 Thread Christian Horn
Hi, sorry to bug you again with this issue, but i want to clean stuff up here. Using a Netkey-card that speaks TCOS2 i authenticate to firewalls with OpenSwan as application. The card has 4 keys (id 45-48) and 6 certs (id 45,45,46,47,47,48). Accessing the key with id 47 from OpenSwan (using libo

Re: [opensc-devel] pictures of linuxtag added to web page

2006-05-07 Thread Christian Horn
On Sun, May 07, 2006 at 08:10:54PM +0200, Andreas Jellinghaus wrote: > warning: 1600x1200 or something like that. > can anyone recommend a software to create smaller versions a tool from imagegagick does this for me: convert $file -resize 640x480 small_$file Christian ___

Re: [opensc-devel] PKCS#15-question about Cert-IDs and Key-IDs

2006-02-08 Thread Christian Horn
On Tue, Feb 07, 2006 at 09:54:19PM +0100, Nils Larsch wrote: > > what did you exaclty try to do ? Tried to sign other than binary-md5-data and it failed, creating that hash with openssl and signing it creates output and no error now. 'pkcs15-crypt -k 1 -i -o out.txt --pkcs1 -p 1234567 -v' create

Re: [opensc-devel] PKCS#15-question about Cert-IDs and Key-IDs

2006-02-07 Thread Christian Horn
On Mon, Feb 06, 2006 at 07:36:06PM +0100, Nils Larsch wrote: > Christian Horn wrote: > ... > >>If yes - how is pkcs15-tool -r supposed to work if the given > >>ID is non-unique. > > > >Looks like one would need an other vector/number to describe, i.e. > &

Re: [opensc-devel] PKCS#15-question about Cert-IDs and Key-IDs

2006-02-04 Thread Christian Horn
Hi, >This kind of card contains more then one certificate that correspond >to the same private key and now all this certificates will be given the >same ID (namely the ID of the corresponding private key). >IS THAT CORRECT BEHAVIOUR There are no papers describing the NetkeyE4-standart in thi

Re: [opensc-devel] configure opensc to deliver an other cert as the one requested

2006-02-01 Thread Christian Horn
Hi, > That's a quick (and dirty) hack. Yes, but seems to do what i want. If more people need this and i have overseen an official way to configure this it could be implemented i.e. using opensc.conf . > Could you please supply more details > what exactly you are trying to do. I want to run Open

Re: [opensc-devel] configure opensc to deliver an other cert as the one requested

2006-01-31 Thread Christian Horn
On Mon, Jan 30, 2006 at 09:05:45PM +0100, Nils Larsch wrote: > >The problem is this: the usual case seems to be someone tells the > >application to use private-key with ID 1, and the application also > >uses the cert with ID 1 for that communication. Due to a different > >use of certs in this card

[opensc-devel] configure opensc to deliver an other cert as the one requested

2006-01-28 Thread Christian Horn
Hi, i am unable to use the keys on this smartcard labeled "TeleSec NetKey Card" here. Using pcsc-lite 1.2.9beta9 / openct 0.6.6 / opensc 0.10.0 the card is accessed as a TCOS-card by opensc. Reading certs and accessing private-keys from the card seems to work, global/local-pin-problems are solved