Re: [opensc-devel] Segmentation fault in pkcs11-tool

2012-12-20 Thread Douglas E. Engert
hing in the pkcs11-tool or one of its libraries, when it should be picking up the version in your library. > I try it with libtool as you suggested and let's see what happens. > > And tomorrow has to be the end of the world.. *sigh*.. this week is pretty > bad :-(.

Re: [opensc-devel] Openssl pkcs11-engine using s_client with PIV card

2012-12-20 Thread Douglas E. Engert
/usr/lib/libc.so.6 > #12 0x0041934d in ?? () > #13 0x00007fffffffe598 in ?? () > #14 0x in ?? () > > Thanks for any advice/patches/help :) > Matt > ___ > opensc-devel mailing list > opensc-devel@lists.opensc-

Re: [opensc-devel] Segmentation fault in pkcs11-tool

2012-12-19 Thread Douglas E. Engert
the linker to only export the functions as listed in opensc-pkcs11.exports which is one function C_GetFunctionList. Consider using libtool to build your module. > > Cheers, > Anna > > On Tue, Dec 18, 2012 at 4:38 PM, Douglas E. Engert <mailto:deeng...@anl.gov>>

Re: [opensc-devel] Segmentation fault in pkcs11-tool

2012-12-18 Thread Douglas E. Engert
compiled with the -g but not your module. You may also want to try the OpenSC-0.13.0 > The next release is tagged on the github OpenSC/OpenSC project, > thanks to all of you for your contributions. > > Tarball and MSI installers can be found on github, sourceforge or the CI > ser

Re: [opensc-devel] Segmentation fault in pkcs11-tool

2012-12-17 Thread Douglas E. Engert
C_GetFunctionList points at the functions in your module, > >and not ones that may be defined by the caller. > > This is an interesting point, thank you. Actually no, I have built and linked > it just like a shared library. I thought what's written as 'module' in t

Re: [opensc-devel] Segmentation fault in pkcs11-tool

2012-12-17 Thread Douglas E. Engert
lp, > Anna > > > ___________ > opensc-devel mailing list > opensc-devel@lists.opensc-project.org > http://www.opensc-project.org/mailman/listinfo/opensc-devel > -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Aven

Re: [opensc-devel] Changing Admin PIN on PIV card

2012-12-13 Thread Douglas E. Engert
1) > > It didn't work for me. The output of the command above is attached. See if > there is something that you can figure out. > > Thanks. > > > -Original Message- > From: opensc-devel-boun...@lists.opensc-project.org > [mailto:opensc-devel-boun...@lis

Re: [opensc-devel] Changing Admin PIN on PIV card

2012-12-13 Thread Douglas E. Engert
Original Message- > From: opensc-devel-boun...@lists.opensc-project.org > [mailto:opensc-devel-boun...@lists.opensc-project.org] On Behalf Of Douglas > E. Engert > Sent: Wednesday, December 12, 2012 7:31 AM > To: opensc-devel@lists.opensc-project.org > Subject: Re: [opensc-de

Re: [opensc-devel] Muscle smart card Applet various versions from M.U.S.C.L.E. and OpenSC

2012-12-12 Thread Douglas E. Engert
cle 0.9.11? If they are using different protocols, one side or the other will need changes. Buy a Java 2.2.2 card? > THX. > > ------------ &

Re: [opensc-devel] Changing Admin PIN on PIV card

2012-12-12 Thread Douglas E. Engert
/opensc-devel -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 #!/bin/sh # # change a pin or puk or using the old pin or puk # # parms # # c- change a pin, will prompt for oldpin and newpin # puk - change the puk using old

Re: [opensc-devel] Wrong check for response APDU buffer

2012-12-11 Thread Douglas E. Engert
On 12/11/2012 3:27 PM, Frank Morgner wrote: > On Tuesday, December 11 at 09:59AM, Douglas E. Engert wrote: >> >> >> >> On 12/7/2012 5:15 PM, Frank Morgner wrote: >>> Hi! >>> >>> Currently, sc_check_apdu checks the length of an R-APDU buffe

Re: [opensc-devel] Wrong check for response APDU buffer

2012-12-11 Thread Douglas E. Engert
n */ > > > ___________ > opensc-devel mailing list > opensc-devel@lists.opensc-project.org > http://www.opensc-project.org/mailman/listinfo/opensc-devel > -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue

[opensc-devel] Muscle smart card Applet various versions from M.U.S.C.L.E. and OpenSC

2012-12-10 Thread Douglas E. Engert
version n. Which is in line with the PROTO_VERSION_MAJOR the OpenSC code is looking for. Can Martin and Ludovic get together and get these versions in sync, and make it so others don't download the 9 year old version? Thanks. -- Douglas E. Engert Argonne National Laboratory

Re: [opensc-devel] The smart card reader is known as "VMware Virtual USB CCID 00 00" in linux ??!!

2012-12-10 Thread Douglas E. Engert
you check how you loaded the applet. On 12/10/2012 9:54 AM, Douglas E. Engert wrote: > > > On 12/9/2012 9:56 AM, Ludovic Rousseau wrote: >> 2012/12/9 Rns Course : >>> Another request of you: >>> what's your opinion about windows version of opensc (0.12.2 or

Re: [opensc-devel] PIN login broken in 0.13.0rc1

2012-12-10 Thread Douglas E. Engert
certificate, but: > DS key #1, DS key #2, ... / DS certificate #1, DS certificate #2", ... > > @Douglas E. Engert: The code introduced by you with commit > 9468d989cf5f279e11f1551164624c2cd1b25948 is still there, > i.e. the key_ref may be overridden by the o

Re: [opensc-devel] The smart card reader is known as "VMware Virtual USB CCID 00 00" in linux ??!!

2012-12-10 Thread Douglas E. Engert
x27;t find the card to show the ATR, because the card reader >> is not known for it as OMNIKEY. > > No idea. > -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel

Re: [opensc-devel] The smart card reader is known as "VMware Virtual USB CCID 00 00" in linux ??!!

2012-12-05 Thread Douglas E. Engert
t from the host. > VMWare uses PC/SC on Windows to access the reader and shows it as a > fake CCID reader in the VM. > > It is strange that you can get the ATR using pcsc_scan but not using > "opensc-tool -a". > > It is also possible to connect your reader directly to the V

Re: [opensc-devel] OpenSC with VMWare View

2012-11-20 Thread Douglas E. Engert
On 11/20/2012 3:09 PM, Douglas E. Engert wrote: > > > On 11/20/2012 2:35 PM, Michael Wisniewski wrote: >> Hi! >> >> I'm trying to get my PIV card to work with the "vmware-view" client on >> Ubuntu Linux. I've installed the opensc debian p

Re: [opensc-devel] OpenSC with VMWare View

2012-11-20 Thread Douglas E. Engert
____________ > opensc-devel mailing list > opensc-devel@lists.opensc-project.org > http://www.opensc-project.org/mailman/listinfo/opensc-devel > -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel

Re: [opensc-devel] New SE (Security Element) Company Formed

2012-11-15 Thread Douglas E. Engert
products-baimobile/smart-card-reader-iphone-android.html > > Greetings, > > Andreas > -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel

Re: [opensc-devel] I get Card Not Present in Security Devices of FireFox browser?!

2012-11-14 Thread Douglas E. Engert
file. This might give a clue as to how far OpenSC has got with the card. It could also be that if there is no certificate or key on the card, Mozilla is not interested in using it. > > Thanks In Advance. > > > > > > ___ > opensc-devel mailing li

Re: [opensc-devel] PublicKey ASN1 decoding

2012-11-13 Thread Douglas E. Engert
ww.opensc-project.org/mailman/listinfo/opensc-devel > > > -- > > -CardContact Software & System Consulting > |.##> <##.| Andreas Schwier > |# #| Schülerweg 38 > |# #| 32429 Minden, Germany > |'##>

Re: [opensc-devel] [Muscle] pcscd / firefox / ubuntu on android

2012-10-29 Thread Douglas E. Engert
On 10/25/2012 1:49 PM, Martin Paljak wrote: > On Thu, Oct 18, 2012 at 9:48 PM, Douglas E. Engert wrote: > >> So until FF and TB get the fixes, OpenSC-0.13.0 adds a new option to >> the opensc.conf file to cache the pin to accommodate older applications. >> >>

Re: [opensc-devel] PIN not sent to card before signing

2012-10-25 Thread Douglas E. Engert
fff >>> 0xb721d900 16:35:41.195 [opensc-pkcs11] >>> card-cardos.c:439:cardos_select_file: called >>> >>> It seems like sc_pkcs15_compute_signature selects the path of the private >>> key without a prior check, if it is already there. Do you agree?

Re: [opensc-devel] PIN not sent to card before signing

2012-10-23 Thread Douglas E. Engert
On 10/23/2012 3:43 AM, Mathias Tausig wrote: > On Monday 22. October 2012 13:45:36 Douglas E. Engert wrote: >> Based on the information in this thread, it looks like >> pkcs11-tool is is missing two lines that would check >> if the CKA_ALWAYS_AUTHENTICATE is set for the ke

Re: [opensc-devel] PIN not sent to card before signing

2012-10-22 Thread Douglas E. Engert
e cheers Mathias Kind regards, Viktor. ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel ___ opensc-devel mailing list open

[opensc-devel] Fwd: Re: [Muscle] pcscd / firefox / ubuntu on android

2012-10-19 Thread Douglas E. Engert
Another user testing 0.13.0pre1 ... Original Message Subject: Re: [Muscle] pcscd / firefox / ubuntu on android Date: Fri, 19 Oct 2012 16:30:50 -0400 From: James Southwell Reply-To: ja...@thesouthwells.com To: Douglas E. Engert Downloaded 0.13pre1 last night and compiled

Re: [opensc-devel] PIN not sent to card before signing

2012-10-19 Thread Douglas E. Engert
he pin to be cached for uses be applications that do not yet support CKA_ALWAYS_AUTHENTICATE. > cheers > Mathias > > ___ > opensc-devel mailing list > opensc-devel@lists.opensc-project.org > http://www.opensc-project.org/ma

Re: [opensc-devel] [Muscle] pcscd / firefox / ubuntu on android

2012-10-18 Thread Douglas E. Engert
p://lists.drizzle.com/mailman/listinfo/muscle > > -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org ht

Re: [opensc-devel] Linking against OpenSC in visual studio 2010

2012-10-15 Thread Douglas E. Engert
enSC header files? > > Thanks. > > -- > Amadou > > > > ___ > opensc-devel mailing list > opensc-devel@lists.opensc-project.org > http://www.opensc-project.org/mailman/listinfo/opensc-devel > -- Douglas E. Engert Argonne Na

Re: [opensc-devel] W3C takes on Web+SecurityElements

2012-10-03 Thread Douglas E. Engert
where > SAML attributes carry potentially completely alien information like > a role which often is less suitable having in a certificate. Yes, that too. We can map the certificate to an employee and pass employee attributes. Especially helpful if the smart cards are issued by some h

Re: [opensc-devel] W3C takes on Web+SecurityElements

2012-10-03 Thread Douglas E. Engert
2012%2F09%2Fsysapps-wg-charter&urlhash=Tqzg&_t=tracking_disc> >> >> Since the smart card industry have never managed making their stuff "web >> compatible" before, I assume they will fail this time as well. >> >> Anders >> _________

Re: [opensc-devel] PIV-tool in windows environment

2012-09-27 Thread Douglas E. Engert
> I am a programmer and I understand only programming languages. > > > > ___ > opensc-devel mailing list > opensc-devel@lists.opensc-project.org > http://www.opensc-project.org/mailman/listinfo/opensc-devel > -- Douglas E. Engert Argonn

Re: [opensc-devel] OpenSC 0.13 + pcscd as a daemon for Android

2012-09-26 Thread Douglas E. Engert
ue tooth or ccid readers. > > Kind regards, > Jean-Michel POURE > > > > ___ > opensc-devel mailing list > opensc-devel@lists.opensc-project.org > http://www.opensc-project.org/mailman/listinfo/opensc-devel > -- Douglas E. Engert

Re: [opensc-devel] Strange issue in framework-pkcs15.c / pkcs15_gen_keypair

2012-09-25 Thread Douglas E. Engert
enSC was for client use only, and used the PIV card. For testing the piv-tool could tell the card to generate a key pair, but that was not via and PKCS standards. > > Andreas > -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Ave

Re: [opensc-devel] new release?

2012-09-25 Thread Douglas E. Engert
Thunderbird 13.0.1 can now sign e-mail. I had forgot to uncomment in opensc.conf: pin_cache_ignore_user_consent = true; a new feature of 0.13.0pre1 See: http://www.opensc-project.org/pipermail/opensc-devel/2012-August/018282.html -- Douglas E. Engert Argonne National Laboratory 9700

Re: [opensc-devel] new release?

2012-09-24 Thread Douglas E. Engert
Solaris using a test account. On 9/24/2012 2:43 PM, Douglas E. Engert wrote: > > > On 9/24/2012 12:52 PM, Viktor Tarasov wrote: >> On Wed, Sep 19, 2012 at 11:54 PM, Douglas E. Engert > <mailto:deeng...@anl.gov>> wrote: >> >> I have been testin

Re: [opensc-devel] new release?

2012-09-24 Thread Douglas E. Engert
On 9/24/2012 12:52 PM, Viktor Tarasov wrote: > On Wed, Sep 19, 2012 at 11:54 PM, Douglas E. Engert <mailto:deeng...@anl.gov>> wrote: > > I have been testing 0.13.0-pre1 from tarball listed below. > > Builds on Solaris. > > works with MIT Kerberos PKIN

Re: [opensc-devel] Domain Parameter for ECC Keys

2012-09-20 Thread Douglas E. Engert
ain > parameter in AlgorithmIdentifier. Can you come up with a patch? > > Andreas > -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel mailing list

Re: [opensc-devel] new release?

2012-09-19 Thread Douglas E. Engert
4 and rpm i586 > for opensSuSE 12.1 . > Hope that rapidly the building of releases packages for some debian/ubuntu > distributions will be connected. > > It would be nice if you could look/test the tarball or packages of the > release 0.13.0pre1. > Your remarks, proposals, contrib

Re: [opensc-devel] issue with sc_decompress() call when run on Big Endian OS

2012-09-18 Thread Douglas E. Engert
-piv.c and that uses gzip. It works on Solaris sparc, a big endian machine. > > Regards > > > ___ > opensc-devel mailing list > opensc-devel@lists.opensc-project.org > http://www.opensc-project.org/mailman/listinfo/opensc-devel > -

Re: [opensc-devel] Windows minidriver and Secure PIN Entry

2012-09-10 Thread Douglas E. Engert
ders pin pad. > > I'm using an OmniKey 3821 reader which has a pin pad. > > - Tim > > On Mon, 2012-09-10 at 09:56 -0500, Douglas E. Engert wrote: >> To the list: >> The minidriver has code to test for reader features to be able to use >> a PIN PAD reader.

Re: [opensc-devel] Two back-to-back runs, different results

2012-09-10 Thread Douglas E. Engert
On 9/6/2012 9:54 PM, B. Scott Michel wrote: On 9/6/2012 1:38 PM, Douglas E. Engert wrote: On 9/6/2012 11:39 AM, B. Scott Michel wrote: Tried another reader, the Cherry ST-1044U. pkcs15-tool identifies the card using card-piv.c's code using the T0 protocol and will correctly print the c

Re: [opensc-devel] Windows minidriver and Secure PIN Entry

2012-09-10 Thread Douglas E. Engert
application that can be used with a PIN PAD reader? If so what is it and what reader was used? On 9/7/2012 9:33 AM, Taylor, Tim wrote: > On Thu, 2012-09-06 at 15:06 -0500, Douglas E. Engert wrote: > >>> With the PKCS#11 OpenSC calls pcsc_detect_readers and this calls >>> th

Re: [opensc-devel] Windows minidriver and Secure PIN Entry

2012-09-06 Thread Douglas E. Engert
On 9/5/2012 5:17 PM, Douglas E. Engert wrote: > > > On 9/5/2012 4:32 PM, Taylor, Tim wrote: >> I have installed the drivers from HID Global for this reader. >> >> The same reader device driver will be used regardless of whether the >> PKCS#11 module, or the minidr

Re: [opensc-devel] new release?

2012-09-06 Thread Douglas E. Engert
I will create the release dedicated jenkins jobs and will put thus prepared > packages onto the 'usual' places. > > > Kind regards, > Viktor. > > ___ > opensc-devel mailing list > opensc-devel@lists.opensc-project.org > http

Re: [opensc-devel] Windows minidriver and Secure PIN Entry

2012-09-05 Thread Douglas E. Engert
t;> Is there a way to have the external PIN pad be used to enter card PINs >>> when using the opensc minidriver? >>> >>> - Tim >>> >>> _______ >>> opensc-devel mailing list >>> opensc-devel@

Re: [opensc-devel] Two back-to-back runs, different results

2012-09-05 Thread Douglas E. Engert
ike signed/unsigned conversions, integer length issues, ... If the code has > to compile with -Wall, then the code could be selective with respect to which > are really important warnings, no? > ___ > opensc-devel mailing list > opensc-devel@lists.ope

Re: [opensc-devel] encrypt / decrypt

2012-08-27 Thread Douglas E. Engert
On 8/23/2012 5:21 AM, j.witvl...@mindef.nl wrote: > See below... > > -Original Message- > From: Douglas E. Engert [mailto:deeng...@anl.gov] > Sent: Wednesday, August 22, 2012 6:27 PM > To: Witvliet, J, CDC/IV/DCOPS/I&S/HIN > Cc: opensc-devel@lists.opensc-

Re: [opensc-devel] Minidriver assume hexstring encoding for card serial number

2012-08-22 Thread Douglas E. Engert
Andreas > > [1] > https://github.com/CardContact/OpenSC/commit/724cdd06e23ecd2e822bd1f138d9c3fbdafe9324 > > Am 22.08.2012 20:30, schrieb Douglas E. Engert: >> >> On 8/22/2012 11:24 AM, Andreas Schwier (ML) wrote: >>> Hi Douglas, >>> >>> see below. &g

Re: [opensc-devel] Minidriver assume hexstring encoding for card serial number

2012-08-22 Thread Douglas E. Engert
On 8/22/2012 11:24 AM, Andreas Schwier (ML) wrote: > Hi Douglas, > > see below. > > Am 22.08.2012 18:00, schrieb Douglas E. Engert: >> >> On 8/22/2012 10:09 AM, Andreas Schwier wrote: >>> Hi Douglas, >>> >>> thanks for your infos. >>&g

Re: [opensc-devel] encrypt / decrypt

2012-08-22 Thread Douglas E. Engert
On 8/22/2012 10:51 AM, j.witvl...@mindef.nl wrote: > -Original Message- > From: opensc-devel-boun...@lists.opensc-project.org > [mailto:opensc-devel-boun...@lists.opensc-project.org] On Behalf Of Douglas > E. Engert > Sent: Wednesday, August 22, 2012 5:12 PM >

Re: [opensc-devel] Minidriver assume hexstring encoding for card serial number

2012-08-22 Thread Douglas E. Engert
long as you have 6 digits or characters in your printable string that should be fine. > Andreas > > [1] > https://github.com/CardContact/OpenSC/commit/724cdd06e23ecd2e822bd1f138d9c3fbdafe9324 > > Am 22.08.2012 16:29, schrieb Douglas E. Engert: >> >> On 8/22/2012 5:28 AM

Re: [opensc-devel] encrypt / decrypt

2012-08-22 Thread Douglas E. Engert
the addressee or if this message was sent to you by mistake, you are > requested to inform the sender and delete the message. The State accepts no > liability for damage of any kind resulting from the risks inherent in the > electronic transmission of messages. > _

Re: [opensc-devel] Minidriver assume hexstring encoding for card serial number

2012-08-22 Thread Douglas E. Engert
gt; 2. if that fails copy serial_number as is with the length being the > length of the ASCII encoded string It must be 16 bytes. > > This should not interfere with current card drivers which all use a hex > string as serial number. > > Any objections ? If you can show that your meth

[opensc-devel] OpenSC Bugs and releases

2012-08-16 Thread Douglas E. Engert
Viktor, Thanks for going through all OpenSC bug reports the last few days. Its been a long time since that has been done. Do you have a time estimate when you will be done, and when we can have a 0.13.0 release candidate? Thanks. -- Douglas E. Engert Argonne National Laboratory 9700

Re: [opensc-devel] [i...@mightymarvels.de: cardos driver problem: PKCS#15 binding failed: Unsupported card]

2012-08-15 Thread Douglas E. Engert
__ > opensc-devel mailing list > opensc-devel@lists.opensc-project.org > http://www.opensc-project.org/mailman/listinfo/opensc-devel > > -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (

Re: [opensc-devel] Some elementary questions on smart card usage

2012-08-13 Thread Douglas E. Engert
description? > > Feedback on this will be much appreciated. Again, if this is not the right > forum for these questions, I will be most thankful if somebody could point me > to the appropriate forum(s). > ___ > opensc-devel mailing list > opensc-

Re: [opensc-devel] PIV: signature output format

2012-08-13 Thread Douglas E. Engert
ration, so it has not been an issue so far. NIST 800-78-2 says PSS it is an acceptable padding to use. > > We have support for it in the SmartCard-HSM and want to add it to OpenSC. > > Andreas > > Am 13.08.2012 00:45, schrieb Douglas E. Engert: >> >> On 8/11/2012 1:2

Re: [opensc-devel] PIV: signature output format

2012-08-12 Thread Douglas E. Engert
and do a conditional conversion in > sc_pkcs11_signature_final. > > Andreas > > > Am 26.06.2012 08:06, schrieb Viktor Tarasov: >> >> >> On Mon, Jun 25, 2012 at 9:22 PM, Douglas E. Engert > <mailto:deeng...@anl.gov>> wrote: >> >> Just ba

Re: [opensc-devel] Unsing engine_pks11 with openssl-fips 2.0

2012-08-12 Thread Douglas E. Engert
d use the FIPS version of OPenSSL. On 8/10/2012 9:32 AM, Mathias Tausig wrote: > On 08/10/2012 03:41 PM, Douglas E. Engert wrote: >> Not much to go on below. > > Sorry. I will provide more information below. > >> Is there a core file produced? > > No. > >>

Re: [opensc-devel] Unsing engine_pks11 with openssl-fips 2.0

2012-08-10 Thread Douglas E. Engert
ng with the FIPS-capable build but without actually > enabling FIPS-mode. > > I am quite lost here. Any ideas? > > cheers > Mathias > ___ > opensc-devel mailing list > opensc-devel@lists.opensc-project.org > http://www.o

Re: [opensc-devel] new release?

2012-08-07 Thread Douglas E. Engert
my message "[opensc-devel] OpenSC, CK_ALWAYS_AUTHENTICATE and Thunderbird" from 8/6/2012 I would like to see these in 0.13.0 if possible as there are users with these problems. On 8/6/2012 9:34 AM, Douglas E. Engert wrote: > I am going to send shortly, under a different subject,

Re: [opensc-devel] opensc-java problem

2012-08-06 Thread Douglas E. Engert
penSC. > > > Vlad > ___ > opensc-devel mailing list > opensc-devel@lists.opensc-project.org > http://www.opensc-project.org/mailman/listinfo/opensc-devel > > -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenu

[opensc-devel] OpenSC, CK_ALWAYS_AUTHENTICATE and Thunderbird

2012-08-06 Thread Douglas E. Engert
nd OpenSC look bad, and is not user friendly.) (3) would work, but is ugly. Comment? Are there cards other then the PIV that have this problem? -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonn

Re: [opensc-devel] new release?

2012-08-06 Thread Douglas E. Engert
still not accessible and so > there is no possibility to pick-up > the 'useful' proposals that have been made there. > > Kind regards, > Viktor. > ___ > opensc-devel mailing list > opensc-devel@lists.opensc-project.o

Re: [opensc-devel] openssl + smartcard + extra libs

2012-07-28 Thread Douglas E. Engert
d resulting from the risks inherent in the > electronic transmission of messages. > ___ > opensc-devel mailing list > opensc-devel@lists.opensc-project.org > http://www.opensc-project.org/mailman/listinfo/opensc-devel > > -- Douglas E

Re: [opensc-devel] Card Driver information to Support SafeNet's DK400 Smart Card

2012-07-24 Thread Douglas E. Engert
me know if any furter information is require. Please help me asap. Thank you. Regards, Puneet Khunteta ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Doug

Re: [opensc-devel] new release?

2012-07-23 Thread Douglas E. Engert
e, > please, do pull request to 'staging' branch of GitHub OpenSC > (git://github.com/OpenSC/OpenSC.git) . > > Kind regards, > Viktor. > > ___ > opensc-devel mailing list > opensc-devel@lists.opensc-project.org > http:/

Re: [opensc-devel] PIV test cards available from NIST

2012-07-23 Thread Douglas E. Engert
n the card drivers. > > > > ___ > opensc-devel mailing list > opensc-devel@lists.opensc-project.org > http://www.opensc-project.org/mailman/listinfo/opensc-devel > -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue

[opensc-devel] PIV test cards available from NIST

2012-07-20 Thread Douglas E. Engert
If anyone is interested, NIST now has for sale a set of 16 test PIV cards which includes both RSA and ECC keys. See: http://www.nist.gov/srd/nistsd33.cfm http://csrc.nist.gov/groups/SNS/piv/testcards.html -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue

Re: [opensc-devel] ECDH in 'staging' of github OpenSC/OpenSC

2012-07-12 Thread Douglas E. Engert
s will be performed later, > when the rest of pending proposals will find their place in 'staging'. > > If you are using Windows environment you can try one of MSIs from > https://opensc.fr/jenkins/view/OpenSC-staging/ I will try and do that next week. > > Kind regards

Re: [opensc-devel] PKCS#15 Emulator

2012-07-12 Thread Douglas E. Engert
nd OpenSC interactions, especially during login. > > Thanks Douglas. > > > > > On Wed, Jul 11, 2012 at 11:27 PM, Douglas E. Engert wrote: >> >> >> On 7/10/2012 8:19 PM, Galoh Haron wrote: >>> >>> Douglas, >>> >>> here

Re: [opensc-devel] PKCS#15 Emulator

2012-07-11 Thread Douglas E. Engert
00 33003500 33003600 2D003300 0020 37003300 38002D00 33003900 30006300 2D003000 37003500 34003800 30003500 After this things progress to passing he certificate back. So it looks like some of the minidriver is not creating the cmapfile, maybe because it can not find something form your card. Look

Re: [opensc-devel] PKCS#15 Emulator

2012-07-10 Thread Douglas E. Engert
012-07-02 22:06:20.340 [pkcs15-tool] asn1.c:1394:asn1_decode: >>> returning with: 0 (Success) >>> 2012-07-02 22:06:20.340 encoding 'serialNumber' >>> 2012-07-02 22:06:20.340 type=4, tag=0x02, parm=013C0380, len=16 >>> 2012-07-02 22:06:20.340 l

Re: [opensc-devel] Enable debug problem

2012-06-26 Thread Douglas E. Engert
handling login correctly, as it needs to read certificates off the card before the user logins. > > Thanks, > > Brian Thomas > ___ > opensc-devel mailing list > opensc-devel@lists.opensc-project.org > http://www.opensc-project.org/mailm

Re: [opensc-devel] PIV: signature output format

2012-06-25 Thread Douglas E. Engert
in > the pkcs15 framework of pkcs11. Where do you see in PKCS#15 that a ECDSA signature is in ANS1? If it needs to be ASN1, then yes the conversion could be done in the framework. > > Kind regards, > Viktor. > > > > > > > > > > -- Douglas E. En

Re: [opensc-devel] Enable debug problem

2012-06-14 Thread Douglas E. Engert
r with a card: C3PO LTC31 (80060327) 00 00 > entersafe > > > but the debug file does not appear at /tmp dir. > > I've edited /etc/opensc/opensc.conf file as the attached files. > > Can you help me? > > Thanks! > > Alejandro Díaz Torres > Área de Proyectos > > Em

Re: [opensc-devel] T-Buffer Question

2012-06-07 Thread Douglas E. Engert
_ > opensc-devel mailing list > opensc-devel@lists.opensc-project.org > http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 __

Re: [opensc-devel] T-Buffer Question

2012-06-06 Thread Douglas E. Engert
. > > I can't find anything that helps me identify the tags. If any one can help > it would be greatly appreciated. > > Jon > > > > > > ___ > opensc-devel mailing list > opensc-devel@lists.opensc-projec

Re: [opensc-devel] Is it OK to include external library?

2012-06-05 Thread Douglas E. Engert
brary will cause all sorts of problems, and add to the complexity of the build process and size of the modules. OpenSSL can generate key fingerprints, and I am not mistaken, should match the fingerprint as generated from OpenPGP. If not OpenSSL has enough crypto functions that it could do this. &g

Re: [opensc-devel] ECDH in 'staging' of github OpenSC/OpenSC

2012-06-04 Thread Douglas E. Engert
g Windows environment you can try one of MSIs from > https://opensc.fr/jenkins/view/OpenSC-staging/ I will try and test this week. > > Kind regards, > Viktor. > > -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439

Re: [opensc-devel] new release?

2012-05-25 Thread Douglas E. Engert
On 5/25/2012 6:04 AM, Martin Paljak wrote: > Hello, > > On Wed, May 2, 2012 at 5:31 PM, Douglas E. Engert wrote: >> The SM branch has pulled in many other changes (including >> my C_Derive changes) that I would like to see in the next release. >> If the SM branch i

Re: [opensc-devel] help Me I'm beginner

2012-05-14 Thread Douglas E. Engert
eeOTFE Then use OpenSC's PKCS#11. > -- > Hamed Izadi. > > > ___ > opensc-devel mailing list > opensc-devel@lists.opensc-project.org > http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert Argonne Nation

Re: [opensc-devel] new release?

2012-05-02 Thread Douglas E. Engert
> ___ > opensc-devel mailing list > opensc-devel@lists.opensc-project.org > http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439

Re: [opensc-devel] Biometric integraiton?

2012-04-25 Thread Douglas E. Engert
On 4/25/2012 10:20 AM, Marc Boorshtein wrote: > On Wed, Apr 25, 2012 at 10:36 AM, Douglas E. Engert wrote: >> >> >> On 4/25/2012 8:10 AM, Marc Boorshtein wrote: >>> So I now I have a PIV card that I know has a certificate on it because >>> I can l

Re: [opensc-devel] Biometric integraiton?

2012-04-25 Thread Douglas E. Engert
__ > opensc-devel mailing list > opensc-devel@lists.opensc-project.org > http://www.opensc-project.org/mailman/listinfo/opensc-devel > > -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: [opensc-devel] PIV card not loading certificates on Fedora 15

2012-04-23 Thread Douglas E. Engert
improvement for the normal case. I am attaching a pivdump.sh script that can by used to dump objects from the card to files, that can then be processed at a later time. If you send me the CHUID, I can decode it. Thanks Marc ___ opensc-devel mailin

Re: [opensc-devel] OpenSC and multi-arch support

2012-04-11 Thread Douglas E. Engert
___ >> opensc-devel mailing list >> opensc-devel@lists.opensc-project.org >> http://www.opensc-project.org/mailman/listinfo/opensc-devel >> > > > > ___ > opensc-devel mailing list > opensc-devel@lists.opensc

Re: [opensc-devel] Ownership issue and consequences on OpenSC project

2012-03-23 Thread Douglas E. Engert
On 3/23/2012 3:29 PM, Martin Paljak wrote: On Fri, Mar 23, 2012 at 22:16, Douglas E. Engert wrote: ECDH/C_Derive - One needs a smart card that can do ECC key derivation. I have some test cards and some demo cards from NIST that can do this, The NIST people were using the

Re: [opensc-devel] Upgrading aPass2003 Firmware to PIV

2012-03-23 Thread Douglas E. Engert
On 3/23/2012 2:59 PM, Martin Paljak wrote: > Hello, > > On Tue, Feb 21, 2012 at 16:46, Douglas E. Engert wrote: >> It does not define a load key or any finalize >> commands which would be needed by a production card management system. Martin, You really are catching up

Re: [opensc-devel] Ownership issue and consequences on OpenSC project

2012-03-23 Thread Douglas E. Engert
ces or just because it is very difficult for a > handful of otherwise busy people to find that time (I guess). > > But a bi-weekly "recap" would be good idea to have. > > > Best, > Martin > ___ > opensc-devel mailing list &g

Re: [opensc-devel] OpenSC and gerrit

2012-03-21 Thread Douglas E. Engert
porate an association. > >> And what if core developers to not want to join your association? :-) > > As written previously, to make commit to GIT there will be no obligation > to be part of the association. Everyone is free to contribute to GIT and > submit patches and we'll

Re: [opensc-devel] gerrit and merge process: "Submitted, Merge Pending" state

2012-03-14 Thread Douglas E. Engert
opensc-devel mailing list > opensc-devel@lists.opensc-project.org > <mailto:opensc-devel@lists.opensc-project.org> > http://www.opensc-project.org/mailman/listinfo/opensc-devel > > > > > ___ > opensc-devel ma

Re: [opensc-devel] gerrit and merge process: "Submitted, Merge Pending" state

2012-03-13 Thread Douglas E. Engert
h.html Googling for: gerrit Submitted, Merge Pending shows some articles, on what this message could mean. It could be a bug: http://code.google.com/p/gerrit/issues/detail?id=600 > Thanks > -- Douglas E. Engert Argonne National Laboratory 9700 S

Re: [opensc-devel] [opensc-commits] [OpenSC] #429: obtain certificate or private key using slot id and an index

2012-03-12 Thread Douglas E. Engert
t that the enumerations match.) You still need the id or label of the key which you program would not do not have. > -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___

Re: [opensc-devel] ePass2003 pull request to OpenSC

2012-03-09 Thread Douglas E. Engert
sc-devel@lists.opensc-project.org > http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel

Re: [opensc-devel] Question about struct sc_pkcs15_id

2012-03-09 Thread Douglas E. Engert
and I use the id 100 with > the first certificate and I use the id 100 > with the second certificate. When I try to add the second certificate I > obtain that there is a certificate with the same id within the smartcard. > > Thank you. > > On Wed, Mar 7, 2012 at 3:5

Re: [opensc-devel] Question about struct sc_pkcs15_id

2012-03-07 Thread Douglas E. Engert
tools/pkcs15-tool.c in the print_cert_info routine. > > Thank you. > > On Wed, Mar 7, 2012 at 12:02 AM, Douglas E. Engert <mailto:deeng...@anl.gov>> wrote: > > > > On 3/5/2012 10:45 AM, evalues evalues wrote: > > Hello, > > > > how data

Re: [opensc-devel] Question about struct sc_pkcs15_id

2012-03-06 Thread Douglas E. Engert
the asci characters and set the length. > > Thank you. > > > ___ > opensc-devel mailing list > opensc-devel@lists.opensc-project.org > http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert Argonne National

  1   2   3   4   5   6   7   8   >