Hi,
I'm testing onepin profile on last opensc from 'master' branch commited on
GitHub, and with CardOS 4.3B. When I try to import a key, I've a strange error.
Did I miss something ?
With the same setup and normal profile, no problem.
Thanks,
Jean-Pierre
pkcs15-init -C -p pkcs15+onepin --pin
On 06/08/2011 04:41 PM, Andre Zepezauer wrote:
> On Wed, 2011-06-08 at 16:35 +0200, Jean-Pierre Szikora wrote:
>> On 06/08/2011 03:50 PM, Andre Zepezauer wrote:
>>> On Wed, 2011-06-08 at 11:50 +0200, Jean-Pierre Szikora wrote:
>>>> On 06/07/2011 03:17 PM, Andre Zep
On 06/08/2011 03:50 PM, Andre Zepezauer wrote:
> On Wed, 2011-06-08 at 11:50 +0200, Jean-Pierre Szikora wrote:
>> On 06/07/2011 03:17 PM, Andre Zepezauer wrote:
>>> Hello Jean-Pierre,
>>>
>>> SC_PKCS15_PIN_FLAG_VERIFY_RC_COUNTER doesn't correspond to any
On 06/07/2011 03:17 PM, Andre Zepezauer wrote:
> Hello Jean-Pierre,
>
> SC_PKCS15_PIN_FLAG_VERIFY_RC_COUNTER doesn't correspond to any flag
> defined in PKCS#15. Furthermore, the capability to modify the return
> code of the VERIFY command is not specific to PKCS#15.
>
> Why not using a different a
Hi Andre,
You're right. My first idea is set this verifyRC feature through the
cardos.profile file. But by checking for the package installation, we don't
even need for a switch. I will revert this patch tomorrow.
Cheers,
Jean-Pierre
Le 7 juin 2011 à 15:17, Andre Zepezauer a écrit :
> Hello
On 05/29/2011 12:35 AM, Viktor Tarasov wrote:
> Hello Jean-Pierre, Frank,
>
> Le 27/05/2011 17:27, JP Szikora a écrit :
>> Hi Viktor,
>> The change that you pushed in OpenSC SVN r5237 breaks completely the
>> support for Belgian eID (eidenv, pkcs15-tool, opensc-pksc11.so usage
>> with Firefox is n
Hi Jean-Michel,
Can you do this script, let's say 10 times, and give a mean value, a min and a
max value? The RSA key generation time is usually (highly) variable.
Cheers,
Jean-Pierre
Le 7 févr. 2011 à 12:43, Jean-Michel Pouré - GOOZE a écrit :
> Dear all,
>
> I just modified this page!
> ht
Le 4 nov. 2010 à 21:56, Andre Zepezauer a écrit :
> Hello Jean-Pierre,
>
> On Wed, 2010-11-03 at 11:55 +0100, JP Szikora wrote:
>> Hi Andre,
>>
>> Which software did you try? I have no problem with pkcs15-init -C, -S ,
>> -U or -X.
>
> I'm using a proprietary library, because encrypted APDU:s
Le 27-août-10 à 15:27, Patrik Martinsson a écrit :
> Hi Jean-Pierre,
>
> Ok. Cool, I did not know that.
> I've tested it and confirmed,
>
> $ opensc-tool -s 00:CA:DF:30:05
> 0x7fd0da512700 15:24:21.566 [opensc-tool] reader-pcsc.c:
> 964:pcsc_detect_readers: returning with: 0
> Using reader with
Hi,
I committed a new SCA test release built and tested on MacOSX 10.6.
http://www.opensc-project.org/files/sca/experimental/sca-0.3.0-pre1.dmg
Contains OpenSC, LibP11, Engine and patched version of OpenSSH.
No OpenSC.Tokend yet.
libusb, ifd-egate and pcscd-autostart are not supplied anymore.
Th
Le 02-oct.-09 à 14:42, Martin Paljak a écrit :
> The reason for a custom OpenSSL was apparently DSO support, which is
> built into OpenSSL 0.9.8 on Snow Leopard => we have the option of
> dropping OpenSSL, IMHO.
>
Hi Martin,
You're right. I've recompiled engine and linked with the natively
in
Alon Bar-Lev wrote:
> On 1/24/09, Martin Paljak wrote:
>> On 24.01.2009, at 8:12, Alon Bar-Lev wrote:
>>
>>> BTW: You should check if you need to include iconv in this environment
>>> as well... I remember martin had to add it.
>>>
>> iconv, as well as OpenSSL are provided by OS X, so unless the
Maybe it is time to upgrade Trac? Also, maybe we could
> use OpenID for authentication ?:)
> What do you think?
--
Dr Jean-Pierre Szikora e-mail: [EMAIL PROTECTED]
tel: 32-2-764.75.00
74, av. Hippocra
Martin Paljak wrote:
> On Feb 13, 2008, at 2:18 PM, JP Szikora wrote:
>> The main problem with Leopard is bug in pcscd, which is still not fixed
>> in 10.5.2. The daemon appends 0x00 to the ATR, and probably your card is
>> not recognized anymore by OpenSC
>
>
> The attached patch for src/libopen
Andreas Jellinghaus a écrit :
> On Thursday 06 September 2007 12:53:46 Haizad wrote:
>
>> I have been testing the OpenSC library to issue a digital certificate in a
>> smart card for SETEC. But when I try to generate a private key, the error
>> is raised "Unrecognized Card". How can I set the ne
Jacob H. Wiseman a écrit :
>
> Has anyone been able to reformat an Aladdin eToken with CardOS 4.2b to
> an uninitialized state? The software provided with the old eToken I
> used to reformat doesn’t recongnize the new 4.2b. I would simply try
> various methods, but as the eToken is expensive and I
Ludovic Rousseau a écrit :
> On 13/08/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
>
>> Revision: 99
>> Author: jps
>> Date: 2007-08-13 11:51:37 + (Mon, 13 Aug 2007)
>>
>> Log Message:
>> ---
>> In order to compile opensc-svn-r3244 on MacIntel.
>> (opensc-svn-r3244 didn't e
Ludovic Rousseau a écrit :
> On 11/08/07, Alon Bar-Lev <[EMAIL PROTECTED]> wrote:
>
>> On Friday 10 August 2007, Andreas Jellinghaus wrote:
>>
>>> would be nice to get this working, but we need to set LTLIBLTDL or similar
>>> (or adjust the autoconf makefiles - I prefer not setting LIBS so
Dennis van Dok wrote:
> Hi,
>
> The engine_pkcs11 software (version 0.1.3) compiles and builds nicely on
> my Intel MacBook. Now I want to generate a 'universal binary', which
> means that I have to pass the flag '-arch ppc' to gcc to generate
> PowerPC binaries. I'm trying to do this by setting C
Andreas Jellinghaus a écrit :
> On Monday 23 July 2007 14:03:42 Jean-Pierre Szikora wrote:
>
>> I can not run anymore ./bootstrap for any version of opensc-trunk >3204.
>> I'm working with a Fedora Core 6. Installed autoconf is 2.59 and m4 is
>> 1.4.8. Are th
Andreas Jellinghaus a écrit :
> but we also have quite some turnover rate at opensc, everyone of the
> people that started opensc is no longer interested in it. to keep it
> maintainable we also have to keep the code small and readable.
> thus I don't want to blow up the configure code to add ever
Larner, Russell a écrit :
>
> My company has been working with the PIV functionality in OpenSC and
> SCA, and we needed to add a couple of features:
>
> - Individual PIV card serial number calculation (to enable correct
> cert caching in SCA)
>
> This was fairly complex, due to issues in the PIV sp
Andreas Jellinghaus a écrit :
> On Tuesday 15 May 2007 11:16:17 Ian Young wrote:
>
>> Making higher level things like pkcs11-tool work requires a fair bit of
>> additional work, probably including writing a PKCS#15 emulation layer
>> (ACS's implementation is non-standard in various ways, from wh
Hi,
I just released a new experimental version of SCA (for MacOSX). This
includes OpenSC 0.11.2-pre6. It is avalaible here:
http://www.opensc-project.org/files/sca/experimental/
Happy testing.
Jean-Pierre
___
opensc-devel mailing list
opensc-devel@lis
Thomas Harning Jr. a écrit :
> On Tue, 2007-01-02 at 20:22 +0100, JP Szikora wrote:
>
>> Thomas Harning Jr. wrote:
>>
>>> Has anyone compiled SCA on a MacIntel?
>>> I know that the recent builds of SCA are Universals, but I need a
>>> version w/ the new PIV support patch applied ( ticket #1
Justin R Eylander a écrit :
> Just wondering if there exists code to tie OpenSC to Mac OS X's
> authentication window. I'd like to be able to use OpenSC/PAM Pkcs#11 to
> log into OS X.
>
>
Hi Justin,
Please check this page:
http://www.opensc-project.org/sca/wiki/LogonAuthenticate
Cheers,
Je
Andreas Jellinghaus a écrit :
> does anyone know how I can pass the pin to the pkcs11 engine?
Hi Andreas,
I've looked at it just a month ago. And I add a line in the QuickStart
about it...
>
> preferable I'd like to use openssl with the openssl.conf file
> (see QuickStart in the wiki) and have onl
Harsh Sangal a écrit :
Thanks, now it is clear to me that "pcscd" would only be auto launched for a
fixed set fo tokens and not in case of ours. Does the same apply to the
"tokend" for the token? Becoz I found that the security server i.e.
securityd didn't start any "tokend" (e.e. CAC, BELPIC etc
Harsh Sangal a écrit :
I willl have to write a tokend for my crypto USB token and I have a
ifdhandler for the same. But I have a question regarding the support of
smart cards/tokens in MAC OS X 10.4+ as said by apple technical staff. They
say-
1. open up the terminal and run the "top" command to
Hi,
On MacOSX with Adobe Acrobat Pro 7, there is the possibility to load
PKCS#11 modules (Advanced - Secutity Settings Menu). When I give the
path of the module (/Library/OpenSC/lib/opensc-pkcs11.so) installed by
SCA, I just get a "Could not load the PKCS#11 module" :-(
I have no idea why, a
hsangal a écrit :
Hi,
I am working on a token based authentication solution and wanna add support
for keychain interface on MAC 10.4. I would seek your help on this and would
appreciate if you can share the code.
Hi,
All our code is available at
http://www.opensc-project.org/sca/browser/tr
Hi,
I've just uploaded a new experimental release of SCA. This conatins the
last OpenSC-0.11.1 and the last Libp11-0.2.2. The complete version is
available at
http://www.opensc-project.org/files/sca/experimental/sca-0.1.9pre8.dmg.
I've also updated the "light" version (which just contains Op
Hi,
Is the default lock_login really set to 'false' in OpenSC 0.11.0 as I
can read in opensc.conf? During my testing before releasing a new
experimental SCA release, I need to explicitely set 'lock_login =
false;' to get the right behaviour.
Cheers,
Jean-Pierre
_
Andreas Jellinghaus a écrit :
we still have a hard coded default module name "opensc-pkcs11"
or "opensc-pkcs11.so". With the switch to ltdl() functions we don't
need to compile in the exact location of that file. instead the normal
paths are searched (under linux: LD_LIBRARY_PATH and /etc/ld.so.
Hi,
I released a new version of the experimental SCA. This is the first
"Universal Binaries" version of SCA (with the exception of OpenCS.Tokend
which works only on PPC based Macs). It includes also OpenSC 0.11.0-RC1.
The Installer if available here:
http://www.opensc-project.org/files/sca/e
Martin Paljak a écrit :
On 04.04.2006, at 16:37, Jean-Pierre Szikora wrote:
You probably need an universal version of your card reader driver...
It might be a good idea to open a wiki page and start to collect such
information. The generic CCID driver bundled with os x does not work
for
also will compile an Intel version.
You probably
need an universal version of your card reader driver...
Our new C3PO LTC31 USB works with the generic USB CCID driver and we've
tested it with both PowerPC and Intel version.
Thanks,
--
Dr Jean-Pierre Szikora
Martin Paljak a écrit :
On 04.04.2006, at 16:37, Jean-Pierre Szikora wrote:
You probably need an universal version of your card reader driver...
It might be a good idea to open a wiki page and start to collect such
information. The generic CCID driver bundled with os x does not work
for
ed an universal version of your card reader driver...
Regards,
Jean-Pierre
We need to work on both arquitectures, so if you want we'll send you a
dmg for each arquitecture.
Thanks,
[1] http://www.opensc-project.org/sca/
--
Dr Jean-Pierre Szikora e-mail: [EMAIL
ierre
And make gives us the commented error. This error occurs on both Power
PC and Intel arquitecture.
Has anyone of you compiled OpenSC on a MacOS X? Do you kwow why are we
getting this error when compiling?
TIA,
--
Dr Jean-Pierre Szikora e-mail: [EMAIL PROT
Hi,
Thanks to Yannick Leplard for analyzing and reporting this problem.
In onepin mode and when the first certificate is added to a SC by itself
(not through a PKCS12), the ACL of PKCS15-CDF (5015/4404) is set to
NONE... If the same certificate is added through a PKCS12, the ACL is
correctly
should work with the tokend as well.
Hi,
There is a button at the bottom left of the KeyChain Access panel on
which you need to click in order to see the different keychain. One of
them will be the SmartCard.
Cheers,
Jean-Pierre
--
Dr Jean-Pierre Szikora e-mail: [EMAIL
42 matches
Mail list logo