[opensc-devel] onepin profile

2012-11-26 Thread Jean-Pierre Szikora
Hi, I'm testing onepin profile on last opensc from 'master' branch commited on GitHub, and with CardOS 4.3B. When I try to import a key, I've a strange error. Did I miss something ? With the same setup and normal profile, no problem. Thanks, Jean-Pierre pkcs15-init -C -p pkcs15+onepin --pin

Re: [opensc-devel] Changeset 5558 in opensc

2011-06-08 Thread Jean-Pierre Szikora
On 06/08/2011 04:41 PM, Andre Zepezauer wrote: > On Wed, 2011-06-08 at 16:35 +0200, Jean-Pierre Szikora wrote: >> On 06/08/2011 03:50 PM, Andre Zepezauer wrote: >>> On Wed, 2011-06-08 at 11:50 +0200, Jean-Pierre Szikora wrote: >>>> On 06/07/2011 03:17 PM, Andre Zep

Re: [opensc-devel] Changeset 5558 in opensc

2011-06-08 Thread Jean-Pierre Szikora
On 06/08/2011 03:50 PM, Andre Zepezauer wrote: > On Wed, 2011-06-08 at 11:50 +0200, Jean-Pierre Szikora wrote: >> On 06/07/2011 03:17 PM, Andre Zepezauer wrote: >>> Hello Jean-Pierre, >>> >>> SC_PKCS15_PIN_FLAG_VERIFY_RC_COUNTER doesn't correspond to any

Re: [opensc-devel] Changeset 5558 in opensc

2011-06-08 Thread Jean-Pierre Szikora
On 06/07/2011 03:17 PM, Andre Zepezauer wrote: > Hello Jean-Pierre, > > SC_PKCS15_PIN_FLAG_VERIFY_RC_COUNTER doesn't correspond to any flag > defined in PKCS#15. Furthermore, the capability to modify the return > code of the VERIFY command is not specific to PKCS#15. > > Why not using a different a

Re: [opensc-devel] Changeset 5558 in opensc

2011-06-07 Thread Jean-Pierre Szikora
Hi Andre, You're right. My first idea is set this verifyRC feature through the cardos.profile file. But by checking for the package installation, we don't even need for a switch. I will revert this patch tomorrow. Cheers, Jean-Pierre Le 7 juin 2011 à 15:17, Andre Zepezauer a écrit : > Hello

Re: [opensc-devel] OpenSC SVN r5237 breaks support for Belgian eID

2011-05-29 Thread Jean-Pierre Szikora
On 05/29/2011 12:35 AM, Viktor Tarasov wrote: > Hello Jean-Pierre, Frank, > > Le 27/05/2011 17:27, JP Szikora a écrit : >> Hi Viktor, >> The change that you pushed in OpenSC SVN r5237 breaks completely the >> support for Belgian eID (eidenv, pkcs15-tool, opensc-pksc11.so usage >> with Firefox is n

Re: [opensc-devel] Feitian PKI speed

2011-02-07 Thread Jean-Pierre Szikora
Hi Jean-Michel, Can you do this script, let's say 10 times, and give a mean value, a min and a max value? The RSA key generation time is usually (highly) variable. Cheers, Jean-Pierre Le 7 févr. 2011 à 12:43, Jean-Michel Pouré - GOOZE a écrit : > Dear all, > > I just modified this page! > ht

Re: [opensc-devel] CardOS 4.4

2010-11-05 Thread Jean-Pierre Szikora
Le 4 nov. 2010 à 21:56, Andre Zepezauer a écrit : > Hello Jean-Pierre, > > On Wed, 2010-11-03 at 11:55 +0100, JP Szikora wrote: >> Hi Andre, >> >> Which software did you try? I have no problem with pkcs15-init -C, -S , >> -U or -X. > > I'm using a proprietary library, because encrypted APDU:s

Re: [opensc-devel] Opensc and SetCOS.

2010-08-27 Thread Jean-Pierre Szikora
Le 27-août-10 à 15:27, Patrik Martinsson a écrit : > Hi Jean-Pierre, > > Ok. Cool, I did not know that. > I've tested it and confirmed, > > $ opensc-tool -s 00:CA:DF:30:05 > 0x7fd0da512700 15:24:21.566 [opensc-tool] reader-pcsc.c: > 964:pcsc_detect_readers: returning with: 0 > Using reader with

[opensc-devel] New experimental SCA for MacOSX 10.6 (SnowLeopard)

2009-11-10 Thread Jean-Pierre Szikora
Hi, I committed a new SCA test release built and tested on MacOSX 10.6. http://www.opensc-project.org/files/sca/experimental/sca-0.3.0-pre1.dmg Contains OpenSC, LibP11, Engine and patched version of OpenSSH. No OpenSC.Tokend yet. libusb, ifd-egate and pcscd-autostart are not supplied anymore. Th

Re: [opensc-devel] OpenSC on smartcardservices.macosforge.org? (Re: SCA for Snow Leopard)

2009-10-03 Thread Jean-Pierre Szikora
Le 02-oct.-09 à 14:42, Martin Paljak a écrit : > The reason for a custom OpenSSL was apparently DSO support, which is > built into OpenSSL 0.9.8 on Snow Leopard => we have the option of > dropping OpenSSL, IMHO. > Hi Martin, You're right. I've recompiled engine and linked with the natively in

Re: [opensc-devel] cross build system ( does opensc (svn version) work for you?)

2009-01-24 Thread Jean-Pierre Szikora
Alon Bar-Lev wrote: > On 1/24/09, Martin Paljak wrote: >> On 24.01.2009, at 8:12, Alon Bar-Lev wrote: >> >>> BTW: You should check if you need to include iconv in this environment >>> as well... I remember martin had to add it. >>> >> iconv, as well as OpenSSL are provided by OS X, so unless the

Re: [opensc-devel] Upgrading Trac on opensc-project.org

2008-02-27 Thread Jean-Pierre Szikora
Maybe it is time to upgrade Trac? Also, maybe we could > use OpenID for authentication ?:) > What do you think? -- Dr Jean-Pierre Szikora e-mail: [EMAIL PROTECTED] tel: 32-2-764.75.00 74, av. Hippocra

Re: [opensc-devel] [opensc-commits] Opensc for OSX Leopard (10.5)

2008-02-13 Thread Jean-Pierre Szikora
Martin Paljak wrote: > On Feb 13, 2008, at 2:18 PM, JP Szikora wrote: >> The main problem with Leopard is bug in pcscd, which is still not fixed >> in 10.5.2. The daemon appends 0x00 to the ATR, and probably your card is >> not recognized anymore by OpenSC > > > The attached patch for src/libopen

Re: [opensc-devel] Failed to personalized smart card

2007-09-10 Thread Jean-Pierre Szikora
Andreas Jellinghaus a écrit : > On Thursday 06 September 2007 12:53:46 Haizad wrote: > >> I have been testing the OpenSC library to issue a digital certificate in a >> smart card for SETEC. But when I try to generate a private key, the error >> is raised "Unrecognized Card". How can I set the ne

Re: [opensc-devel] Reformatting Aladdin eToken with CardOS 4.2b

2007-09-06 Thread Jean-Pierre Szikora
Jacob H. Wiseman a écrit : > > Has anyone been able to reformat an Aladdin eToken with CardOS 4.2b to > an uninitialized state? The software provided with the old eToken I > used to reformat doesn’t recongnize the new 4.2b. I would simply try > various methods, but as the eToken is expensive and I

Re: [opensc-devel] [opensc-commits] svn sca changed [99] In order to compile opensc-svn-r3244 on MacIntel.S

2007-08-13 Thread Jean-Pierre Szikora
Ludovic Rousseau a écrit : > On 13/08/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > >> Revision: 99 >> Author: jps >> Date: 2007-08-13 11:51:37 + (Mon, 13 Aug 2007) >> >> Log Message: >> --- >> In order to compile opensc-svn-r3244 on MacIntel. >> (opensc-svn-r3244 didn't e

Re: [opensc-devel] new versions released

2007-08-13 Thread Jean-Pierre Szikora
Ludovic Rousseau a écrit : > On 11/08/07, Alon Bar-Lev <[EMAIL PROTECTED]> wrote: > >> On Friday 10 August 2007, Andreas Jellinghaus wrote: >> >>> would be nice to get this working, but we need to set LTLIBLTDL or similar >>> (or adjust the autoconf makefiles - I prefer not setting LIBS so

Re: [opensc-devel] Cross-compiling engine_pkcs11 for Darwin PowerPC

2007-08-10 Thread Jean-Pierre Szikora
Dennis van Dok wrote: > Hi, > > The engine_pkcs11 software (version 0.1.3) compiles and builds nicely on > my Intel MacBook. Now I want to generate a 'universal binary', which > means that I have to pass the flag '-arch ppc' to gcc to generate > PowerPC binaries. I'm trying to do this by setting C

Re: [opensc-devel] new versions released

2007-07-29 Thread Jean-Pierre Szikora
Andreas Jellinghaus a écrit : > On Monday 23 July 2007 14:03:42 Jean-Pierre Szikora wrote: > >> I can not run anymore ./bootstrap for any version of opensc-trunk >3204. >> I'm working with a Fedora Core 6. Installed autoconf is 2.59 and m4 is >> 1.4.8. Are th

Re: [opensc-devel] new versions released

2007-07-23 Thread Jean-Pierre Szikora
Andreas Jellinghaus a écrit : > but we also have quite some turnover rate at opensc, everyone of the > people that started opensc is no longer interested in it. to keep it > maintainable we also have to keep the code small and readable. > thus I don't want to blow up the configure code to add ever

Re: [opensc-devel] PIV patch for OpenSC and SCA

2007-05-18 Thread Jean-Pierre Szikora
Larner, Russell a écrit : > > My company has been working with the PIV functionality in OpenSC and > SCA, and we needed to add a couple of features: > > - Individual PIV card serial number calculation (to enable correct > cert caching in SCA) > > This was fairly complex, due to issues in the PIV sp

Re: [opensc-devel] ACOS5 cards implemented yet

2007-05-16 Thread Jean-Pierre Szikora
Andreas Jellinghaus a écrit : > On Tuesday 15 May 2007 11:16:17 Ian Young wrote: > >> Making higher level things like pkcs11-tool work requires a fair bit of >> additional work, probably including writing a PKCS#15 emulation layer >> (ACS's implementation is non-standard in various ways, from wh

[opensc-devel] New experimental SCA release

2007-03-15 Thread Jean-Pierre Szikora
Hi, I just released a new experimental version of SCA (for MacOSX). This includes OpenSC 0.11.2-pre6. It is avalaible here: http://www.opensc-project.org/files/sca/experimental/ Happy testing. Jean-Pierre ___ opensc-devel mailing list opensc-devel@lis

Re: [opensc-devel] Building SCA on MacIntel / PIV Patch #128

2007-01-03 Thread Jean-Pierre Szikora
Thomas Harning Jr. a écrit : > On Tue, 2007-01-02 at 20:22 +0100, JP Szikora wrote: > >> Thomas Harning Jr. wrote: >> >>> Has anyone compiled SCA on a MacIntel? >>> I know that the recent builds of SCA are Universals, but I need a >>> version w/ the new PIV support patch applied ( ticket #1

Re: [opensc-devel] Mac Authentication Window

2006-10-25 Thread Jean-Pierre Szikora
Justin R Eylander a écrit : > Just wondering if there exists code to tie OpenSC to Mac OS X's > authentication window. I'd like to be able to use OpenSC/PAM Pkcs#11 to > log into OS X. > > Hi Justin, Please check this page: http://www.opensc-project.org/sca/wiki/LogonAuthenticate Cheers, Je

Re: [opensc-devel] openssl / engine_pkcs11: how to pass pin?

2006-09-13 Thread Jean-Pierre Szikora
Andreas Jellinghaus a écrit : > does anyone know how I can pass the pin to the pkcs11 engine? Hi Andreas, I've looked at it just a month ago. And I add a line in the QuickStart about it... > > preferable I'd like to use openssl with the openssl.conf file > (see QuickStart in the wiki) and have onl

Re: [opensc-devel] Interfacing eToken Pro/OpenSC with Apple Keychain

2006-06-15 Thread Jean-Pierre Szikora
Harsh Sangal a écrit : Thanks, now it is clear to me that "pcscd" would only be auto launched for a fixed set fo tokens and not in case of ours. Does the same apply to the "tokend" for the token? Becoz I found that the security server i.e. securityd didn't start any "tokend" (e.e. CAC, BELPIC etc

Re: [opensc-devel] Interfacing eToken Pro/OpenSC with Apple Keychain

2006-06-14 Thread Jean-Pierre Szikora
Harsh Sangal a écrit : I willl have to write a tokend for my crypto USB token and I have a ifdhandler for the same. But I have a question regarding the support of smart cards/tokens in MAC OS X 10.4+ as said by apple technical staff. They say- 1. open up the terminal and run the "top" command to

[opensc-devel] pkcs11 support in Acrobat Pro 7 on MacOSX

2006-06-13 Thread Jean-Pierre Szikora
Hi, On MacOSX with Adobe Acrobat Pro 7, there is the possibility to load PKCS#11 modules (Advanced - Secutity Settings Menu). When I give the path of the module (/Library/OpenSC/lib/opensc-pkcs11.so) installed by SCA, I just get a "Could not load the PKCS#11 module" :-( I have no idea why, a

Re: [opensc-devel] Interfacing eToken Pro/OpenSC with Apple Keychain

2006-05-31 Thread Jean-Pierre Szikora
hsangal a écrit : Hi, I am working on a token based authentication solution and wanna add support for keychain interface on MAC 10.4. I would seek your help on this and would appreciate if you can share the code. Hi, All our code is available at http://www.opensc-project.org/sca/browser/tr

[opensc-devel] new experimental SCA versions

2006-05-31 Thread Jean-Pierre Szikora
Hi, I've just uploaded a new experimental release of SCA. This conatins the last OpenSC-0.11.1 and the last Libp11-0.2.2. The complete version is available at http://www.opensc-project.org/files/sca/experimental/sca-0.1.9pre8.dmg. I've also updated the "light" version (which just contains Op

[opensc-devel] lock_login default?

2006-05-02 Thread Jean-Pierre Szikora
Hi, Is the default lock_login really set to 'false' in OpenSC 0.11.0 as I can read in opensc.conf? During my testing before releasing a new experimental SCA release, I need to explicitely set 'lock_login = false;' to get the right behaviour. Cheers, Jean-Pierre _

Re: [opensc-devel] New experimental SCA (OpenSC For Apple MacOSX) release

2006-04-26 Thread Jean-Pierre Szikora
Andreas Jellinghaus a écrit : we still have a hard coded default module name "opensc-pkcs11" or "opensc-pkcs11.so". With the switch to ltdl() functions we don't need to compile in the exact location of that file. instead the normal paths are searched (under linux: LD_LIBRARY_PATH and /etc/ld.so.

[opensc-devel] New experimental SCA (OpenSC For Apple MacOSX) release

2006-04-21 Thread Jean-Pierre Szikora
Hi, I released a new version of the experimental SCA. This is the first "Universal Binaries" version of SCA (with the exception of OpenCS.Tokend which works only on PPC based Macs). It includes also OpenSC 0.11.0-RC1. The Installer if available here: http://www.opensc-project.org/files/sca/e

Re: [opensc-devel] Compiling on MacOS X

2006-04-07 Thread Jean-Pierre Szikora
Martin Paljak a écrit : On 04.04.2006, at 16:37, Jean-Pierre Szikora wrote: You probably need an universal version of your card reader driver... It might be a good idea to open a wiki page and start to collect such information. The generic CCID driver bundled with os x does not work for

Re: [opensc-devel] Compiling on MacOS X

2006-04-05 Thread Jean-Pierre Szikora
also will compile an Intel version. You probably need an universal version of your card reader driver... Our new C3PO LTC31 USB works with the generic USB CCID driver and we've tested it with both PowerPC and Intel version. Thanks, -- Dr Jean-Pierre Szikora

Re: [opensc-devel] Compiling on MacOS X

2006-04-04 Thread Jean-Pierre Szikora
Martin Paljak a écrit : On 04.04.2006, at 16:37, Jean-Pierre Szikora wrote: You probably need an universal version of your card reader driver... It might be a good idea to open a wiki page and start to collect such information. The generic CCID driver bundled with os x does not work for

Re: [opensc-devel] Compiling on MacOS X

2006-04-04 Thread Jean-Pierre Szikora
ed an universal version of your card reader driver... Regards, Jean-Pierre We need to work on both arquitectures, so if you want we'll send you a dmg for each arquitecture. Thanks, [1] http://www.opensc-project.org/sca/ -- Dr Jean-Pierre Szikora e-mail: [EMAIL

Re: [opensc-devel] Compiling on MacOS X

2006-04-04 Thread Jean-Pierre Szikora
ierre And make gives us the commented error. This error occurs on both Power PC and Intel arquitecture. Has anyone of you compiled OpenSC on a MacOS X? Do you kwow why are we getting this error when compiling? TIA, -- Dr Jean-Pierre Szikora e-mail: [EMAIL PROT

[opensc-devel] ACL of PKCS15-CDF incorrectly set to NONE

2006-04-04 Thread Jean-Pierre Szikora
Hi, Thanks to Yannick Leplard for analyzing and reporting this problem. In onepin mode and when the first certificate is added to a SC by itself (not through a PKCS12), the ACL of PKCS15-CDF (5015/4404) is set to NONE... If the same certificate is added through a PKCS12, the ACL is correctly

Re: [opensc-devel] sca: how to know the OpenSC tokend is used and working?

2006-03-14 Thread Jean-Pierre Szikora
should work with the tokend as well. Hi, There is a button at the bottom left of the KeyChain Access panel on which you need to click in order to see the different keychain. One of them will be the SmartCard. Cheers, Jean-Pierre -- Dr Jean-Pierre Szikora e-mail: [EMAIL