On Wed, Dec 12, 2012 at 4:53 PM, Rns Course rns_cou...@yahoo.com wrote:
Hello
I need to compile opensc-0.11.3.
On this page:
http://www.opensc-project.org/opensc/wiki/WindowsInstaller
The command x86: SetEnv.cmd /x86 /Release and nmake /f win32\Makefile.msc
LOC=-DASMV -DASMINF
Hello,
https://www.securecoding.cert.org/confluence/display/seccode/CERT+C+Secure+Coding+Standard
Martin
___
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel
Hello Andreas,
Is the applet available for download or cards with pre-loaded applet
on sale somewhere?
Martin
On Fri, Nov 9, 2012 at 7:33 PM, Andreas Schwier
andreas.schw...@cardcontact.de wrote:
Good evening,
we've created a pull request towards OpenSC/staging for adding the
SmartCard-HSM
On Sun, Oct 14, 2012 at 3:27 PM, Ludovic Rousseau
ludovic.rouss...@gmail.com wrote:
I would suggest to drop the OpenSC tokend, unless someone volunteer to
maintain it.
I think my current mbp running 10.7 will be the last piece of Applet
hardware/software combo I'll run, so the future is
On Thu, Nov 15, 2012 at 7:12 PM, Anders Rundgren
anders.rundg...@telia.com wrote:
Another hurdle is that the GP security model is incompatible with the
Internet: GP presumes mutual authentication AFAIK. This is how the
Google Wallet currently works (Google holds the master keys to the SE)
Hello
On Wed, Nov 14, 2012 at 7:37 PM, Ludovic Rousseau
ludovic.rouss...@gmail.com wrote:
But Martin is now missing.
:) I've not fallen off the edge of the earth, but I've been only
digesting e-mails that have been addressed to me directly and thus
ended up in main inbox (which not many have,
Hello,
On Wed, Nov 21, 2012 at 6:59 PM, Ludovic Rousseau
ludovic.rouss...@gmail.com wrote:
Maybe some people are on the list but no more interested by OpenSC.
Maybe they just redirect the emails into the spam/trash folder.
There's a fairly constant flow of people to and off the list according
On Sat, Nov 17, 2012 at 11:57 PM, Peter Stuge pe...@stuge.se wrote:
Ludovic Rousseau wrote:
The idea of git is to _not_ have to give access. Just send pull
requests and I (or another admin) will pull your code.
No, the purpose of git must not be limiting access :)
Yes and no. Multiple people
On Wed, Nov 21, 2012 at 7:25 PM, Martin Paljak mar...@martinpaljak.net wrote:
Yes and no. Multiple people writing to a central repo works perfectly
fine also with git.
Yes.
The Original Goal(tm) was that instead of bureaucratic rubber-stamping
commits and dividing the whoever extra pair
Bonjour,
On Wed, Nov 14, 2012 at 7:37 PM, Ludovic Rousseau
ludovic.rouss...@gmail.com wrote:
Andreas, the host available at opensc-project.org will disapear at the end
of the year 2012 [2].
There will be a semi-managed (meaning managed backup and other
monitoring) Debian box available for
On Wed, Nov 21, 2012 at 8:55 PM, Andreas Jellinghaus
andr...@ionisiert.de wrote:
2012/11/21 Martin Paljak mar...@martinpaljak.net:
On Thu, Nov 15, 2012 at 7:12 PM, Anders Rundgren
anders.rundg...@telia.com wrote:
Another hurdle is that the GP security model is incompatible with the
Internet
On Thu, Oct 18, 2012 at 9:48 PM, Douglas E. Engert deeng...@anl.gov wrote:
So until FF and TB get the fixes, OpenSC-0.13.0 adds a new option to
the opensc.conf file to cache the pin to accommodate older applications.
pin_cache_ignore_user_consent = true;
Just a suggestion-question: OpenSC
Hello,
On Wed, Sep 12, 2012 at 11:03 PM, Andreas Jellinghaus
andr...@ionisiert.de wrote:
Hi,
opensc-project.org needs a new home: someone with a (real or virtual) server
and the interest in
setting it up from scratch and keeping it running and maintaining that
server, installation and
On Wed, Sep 5, 2012 at 12:57 PM, helpcrypto helpcrypto
helpcry...@gmail.com wrote:
Also, considering how governments are involved in technology, probably
many countries will adopt them, like eID, DNIe, and so in the next
years.
In 1024bit mode, of course.
Huh, I'd guess (hope) nobody would be
On Wed, Sep 5, 2012 at 2:29 PM, helpcrypto helpcrypto
helpcry...@gmail.com wrote:
And IMHO device-attached containers (TPM, Intel etc) are totally
different from transportable key-containers (like smart cards or USB
tokens)
So, IYHO, whats the better option?
Do you want my Humble or Honest
Hello,
On Tue, Aug 21, 2012 at 2:03 PM, Peter Åstrand astr...@cendio.se wrote:
Hi! It would be nice if OpenSC could support cards from the Swedish bank
Handelsbanken (SHB). This is a BankID type of cards. I've tried multiple
versions of OpenSC and they all fail to communicate with the card,
Hello
On Tue, Sep 4, 2012 at 3:19 PM, Martin Čmelík martin.cme...@gmail.com wrote:
Hi Peter,
oh, really?
I was playing with that 5 hours. Seems that I maybe somehow ruined
official SafeNet libraries (but auth client works fine...).
One more note: I'm using it on Mac OS
Can you send me
On Thu, Sep 6, 2012 at 12:32 AM, Taylor, Tim ttay...@mitre.org wrote:
Is the opensc minidriver not able to detect and use the pinpad?
At the moment, no.
___
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
On Sun, Aug 19, 2012 at 8:15 PM, Anders Rundgren
anders.rundg...@telia.com wrote:
Who would buy a $100 solution if they can get one for free?
I don't think even the SIM will survive.
IIRC it was apple who wants to make a phone self-register. Meaning
there are no parts to add or remove from the
Hello,
On Thu, Jun 7, 2012 at 3:46 PM, Jon jonmark...@gmail.com wrote:
The T-buffer is the Tag Buffer. I think the card conforms to Government
Smart Card Interoperability Specification.
(GSC-IS) as defined in NIST 6887. In particular the card is a military
Alt-Token.
Without knowing much
Hello,
On Thu, Jun 7, 2012 at 10:24 PM, Peter Marschall pe...@adpm.de wrote:
Here they are:
* What's the exact difference between WRITE BINARY UPDATE BINARY?
My understanding of the spec is that WRITE BINARY can extend a file's size,
while UPDATE BINARY can only update data elements that
On Thu, Jun 7, 2012 at 10:35 PM, Martin Paljak mar...@martinpaljak.net wrote:
Hello,
On Thu, Jun 7, 2012 at 10:24 PM, Peter Marschall pe...@adpm.de wrote:
Here they are:
* What's the exact difference between WRITE BINARY UPDATE BINARY?
My understanding of the spec is that WRITE BINARY can
On Thu, Jun 7, 2012 at 10:44 PM, Peter Marschall pe...@adpm.de wrote:
Why the question? If there would be a card that implements both, I
think you would want to use UPDATE, at least in the context of OpenSC,
unless it is *not* supported and WRITE is supported.
What exactly is the context?
Hello,
On Fri, Jun 1, 2012 at 9:45 PM, Douglas E. Engert deeng...@anl.gov wrote:
An example might be a PIV card application has the ATR may contain the
default
application on the card. Thus it could be possible that a card has both a
default
application that is not PKCS#15 and the card
Hello,
OpenSC currently tries to read EF(DIR) and if this fails, doesn't find
the PKCS#15 application on the card.
Yet PKCS#15 tells:
a) 5.4.1: EF(DIR) is optional
b) 5.7.1/5.7.2:
PKCS #15 compliant IC cards should support direct application
selection as defined in
ISO/IEC 7816-4 Section 9 and
Hello,
On Mon, May 28, 2012 at 11:10 AM, Peter Marschall pe...@adpm.de wrote:
I am trying to extend openpgp-tool to load data to the various writable DOs,
and - if possible - I want it to determine automatically the permissions of
the (emulated) files using standard interfaces, i.e. security
Hello,
On Fri, May 18, 2012 at 12:59 PM, Nguyễn Hồng Quân quanngu...@mbm.vn wrote:
Hello all,
I need a help to create pkcs15init profile structure so that I can
change/rewrite the canonical path.
In general, the path to a file AABB in PKCS15 is as: 3F005015AABB, in
which 3F00 is the MF,
Hello,
On Tue, May 22, 2012 at 10:18 PM, Peter Marschall pe...@adpm.de wrote:
Martin started the extension of pkcs15-openpgp.c to support OpenPGP v2 cards
which I continued. (but again: without write support)
What was basically removing some v1 related hard-coded constants (like
1024 bit keys)
On Sun, Apr 1, 2012 at 11:09 PM, Git Master
webmas...@opensc-project.org wrote:
commit ef835cb8a93087b0551c9786be655adaa2242a08
Author: Robbert Müller spam...@grols.ch
Date: Sun Jan 8 15:48:12 2012 +0100
Adding default accessflags to the do_store_private_key function in the
same way
Hello,
On Wed, May 2, 2012 at 5:31 PM, Douglas E. Engert deeng...@anl.gov wrote:
The SM branch has pulled in many other changes (including
my C_Derive changes) that I would like to see in the next release.
If the SM branch is not going to be the bases for the next release,
then we need to
Hello,
On Thu, May 24, 2012 at 4:21 PM, NdK ndk.cla...@gmail.com wrote:
Hi all.
Just received $subj and started testing.
Too bad the cards aren't recognized by default:
$ opensc-tool -a -n
Using reader with a card: ACS ACR122U PICC Interface 00 00
3b:85:80:01:4d:79:45:49:44:78
Hello,
On Mon, May 21, 2012 at 2:46 PM, NdK ndk.cla...@gmail.com wrote:
Il 21/05/2012 10:50, j.witvl...@mindef.nl ha scritto:
Anyone around who had the chance to look at
http://www.biometricassociates.com/products-baimobile/smart-card-reader-iphone-android.html
I know that there exist for
On Tue, May 22, 2012 at 4:01 PM, NdK ndk.cla...@gmail.com wrote:
Il 22/05/2012 14:32, Martin Paljak ha scritto:
Regarding PIN codes, communication is protected with AES, in addition
to BT pairing.
How does the AES key exchange work? 'cause it's the weak link...
If the attacker can obtain
Hello,
On Wed, Apr 25, 2012 at 16:10, Marc Boorshtein mboorsht...@gmail.com wrote:
So I now I have a PIV card that I know has a certificate on it because
I can login to my windows terminal with it (XP). The card is using
biometrics or a passphrase to unlock. We're using Precise Biometrics
Hello,
On Sun, Apr 8, 2012 at 21:56, Anton Svensson n00b1...@hotmail.com wrote:
Hmm, what kind of info is needed?
Dont have that much to be honest, Its a white card, got it after i went to
a pki workshop (for 2k8), its from crescendo. And its also typed iclass eh
on the bottom.
Should i
Hello,
On Mon, Apr 23, 2012 at 11:05, Frank Morgner
morg...@informatik.hu-berlin.de wrote:
On Monday, April 23 at 02:11PM, Nguyễn Hồng Quân wrote:
Hello all,
I'm starting to code for OpenSC (with the focus on OpenPGP card).
I found in opensc-explorer.c, the do_update_binary() and
Hello,
On Sat, Apr 14, 2012 at 19:55, Alon Bar-Lev alon.bar...@gmail.com wrote:
Anyway, now that mingw64 is maintained and I guess the old
pcsc-lite may not be supported any more (the one that broke some
interface), it should be safe to link at compile time, change should
not be
Hello,
On Thu, Apr 12, 2012 at 14:27, duportail po...@telenet.be wrote:
Got a vasco reader working, eid-viewer works correct but got this error
when eidenv:
eidenv
Using reader with a card: Vasco DP905 00 00
Failed to decode the ID file: Required ASN.1 object not found
I have a test card
On Sun, Apr 8, 2012 at 16:44, Ludovic Rousseau
ludovic.rouss...@gmail.com wrote:
PS: to the OpenSC members, don't we have a description of what is
needed when reporting a problem?
I could not find it on the wiki.
When trying to post a new ticket, there is a bold link to
ReportingBugs, which
Hello,
On Sun, Apr 8, 2012 at 21:56, Anton Svensson n00b1...@hotmail.com wrote:
Hmm, what kind of info is needed?
Dont have that much to be honest, Its a white card, got it after i went to
a pki workshop (for 2k8), its from crescendo. And its also typed iclass eh
on the bottom.
Should i
Hello,
On Sat, Mar 24, 2012 at 13:19, Ludovic Rousseau
ludovic.rouss...@gmail.com wrote:
Le 24 mars 2012 12:05, Magosányi, Árpád m4g...@gmail.com a écrit :
I guess you might want to discuss the pros and cons of removing libltdl
dependency.
There is a heap of changesets about it in gerrit.
I
Hello,
On Sat, Mar 24, 2012 at 00:25, Magosányi, Árpád m4g...@gmail.com wrote:
It have very few information and looks horrible. This is how far I could
push it. Please help out with it.
Will try. Pointing out actual things to take notice of would also be
good to have.
I think that it would be
Hello,
On Mon, Mar 19, 2012 at 13:08, Jean-Michel Pouré - GOOZE
jmpo...@gooze.eu wrote:
OpenSC copyright belongs to the group of people who wrote OpenSC,
which is all of us. It does not belong to any company and an individual
granting rights to other individuals.
In legal terms, *copyright*
Hello,
On Fri, Mar 23, 2012 at 15:17, Magosányi, Árpád m4g...@gmail.com wrote:
And you simultaneously don't have enough time to review patches.
Both are correct and understandable. And there is a way out of this
situation.
Require assurance of the stuff is working before even taking a look at
Hello,
On Sun, Mar 18, 2012 at 00:30, Viktor Tarasov viktor.tara...@gmail.com wrote:
- replication in gerrit do not working.
Should we manually push the perfect commits from gerrit's repo to staging?
(In the github's pull requests the commits are also perfects, almost perfect.)
Fetching github
Hello,
On Tue, Feb 21, 2012 at 16:46, Douglas E. Engert deeng...@anl.gov wrote:
It does not define a load key or any finalize
commands which would be needed by a production card management system.
I don't know about PIV internals, but maybe the finalize step is
automatic or not needed at all
Hello Anders,
On Tue, Feb 21, 2012 at 19:40, Anders Rundgren
anders.rundg...@telia.com wrote:
I have played with the idea of creating a secure stack-machine for
performing arbitrary cryptographic operations on result-data but I couldn't
figure out how this would work without introducing
On Fri, Mar 23, 2012 at 10:44, Jean-Michel Pouré - GOOZE
jmpo...@gooze.eu wrote:
Here is outlined a PINPAD fix (read second comment):
http://sourceforge.net/tracker/?func=detailatid=2247688aid=3489002group_id=553887
I would like to know your opinion about the proposed solution.
The comment
On Fri, Mar 23, 2012 at 22:16, Douglas E. Engert deeng...@anl.gov wrote:
ECDH/C_Derive - One needs a smart card that can do ECC key derivation.
I have some test cards and some demo cards from NIST that can do this,
The NIST people were using the mods for testing with thunderbird,
Hello,
opensc-project.org SSL certificate expired (kind of suddenly, there
should have been a reminder but that did not arrive for some reason),
the checksums of the new one are:
MD5: 68786c3e0cfe44e31d6c789e767605d5
SHA1: d7af30e8dfd9b6433353999f24e5dbb74132a988
Best,
Martin
://www.opensc-project.org/opensc/wiki/MacInstaller#Binarydependencies
On Sat, Feb 25, 2012 at 01:00, Martin Paljak mar...@martinpaljak.net wrote:
Hello,
On Fri, Feb 24, 2012 at 00:15, Douglas E. Engert deeng...@anl.gov wrote:
Is anyone planing on looking at OpenSC and Mac OS 10.8?
especially
Hello,
On Fri, Mar 16, 2012 at 11:14, Jean-Michel Pouré - GOOZE
jmpo...@gooze.eu wrote:
GOOZE is working on a compilation farm to compile OpenSC and
pcsc-lite/libccid for the following platforms:
GNU/Linux:
* Debian sid 368/amd64
* Debian wheezy 368/amd64
* Debian squeeze 368/amd64
*
Hello,
On Sat, Mar 17, 2012 at 23:01, Viktor Tarasov viktor.tara...@gmail.com wrote:
Gerrit still has replication problem -- 'staging' of OpenSC/OpenSC.git do not
updated by merges of Gerrit's repository.
Certainly, gerrit is nice tool to play with, but, without replication it
looses much
Hello,
On Fri, Feb 24, 2012 at 00:15, Douglas E. Engert deeng...@anl.gov wrote:
Is anyone planing on looking at OpenSC and Mac OS 10.8?
especially in light of:
http://lists.apple.com/archives/fed-talk/2011/Jul/msg00099.html
and
On 12/14/11 5:42 , Alon Bar-Lev wrote:
On Wed, Dec 14, 2011 at 5:13 PM, Alon Bar-Lev alon.bar...@gmail.com wrote:
No, you can use these URLs:
https://www.opensc-project.org/autobuild/
https://www.opensc-project.org/codereview/
To access Jenkins and Gerrit respectively.
This is great
On 12/14/11 5:13 , Alon Bar-Lev wrote:
This is great
I succeed in login to gerrit using google account.
How do I login to jenkins?
Actually there is no similar SSO readily available for Jenkins, nor
should it be necessary. Jenkins should work semi-automatically by
building the
On 12/14/11 4:40 , Douglas E. Engert wrote:
So are you saying, I should get my network people to open ports
8881 and for me? (I can do that, but since others have the
same problem, I was waiting to see if there was some other
solution.)
No. Everything should be doable over http(s) but
On 15/12/11 01:43, Alon Bar-Lev wrote:
Oh... I was so excited I missed some important issue.
When submitting a patchset it should be tested for build as atomic unit.
Currently the system tries to compile each changeset by it-self.
Many times this will not work, as patchset is divided into
Hello,
On Tue, Dec 13, 2011 at 12:51, Johannes Becker
johannes.bec...@hrz.uni-giessen.de wrote:
using Firefox on Mac OS X with CardOS cards I get a connection error.
Ludovic Rousseau kindly showed me how to track it down to the sign
function of opensc 0.12.2:
I believe this has already been
Hello,
Here is an overview of updates to opensc-project.org plumbing and Git.
* Jenkins (build master) has been moved to opensc-project.org.
opensc-project.org will move soonish (probably during the Christmas
time) to a new bare metal home. This allows to run the builders close
together on a
Hello,
On 12/6/11 6:02 , Peter Ordonez wrote:
engine_pkcs does not currently provide a way to get a certificate from
a PKCS#11 hard token when accessed from OpenSSL. I'd like to enhance
the engine to support the OpenSSL ENGINE_load_ssl_client_cert()
function, which returns among other things
Hello,
On Mon, Dec 5, 2011 at 19:08, Douglas E. Engert deeng...@anl.gov wrote:
http://www.opensc-project.org/opensc/wiki/MiniDriver#no1
in the diagram from OpenSCCardMod.png shows cardmod.dll.
I think it should opensc-minidriver.dll
Can this be changed?
The diagrams are made with
On Nov 26, 2011, at 3:01 , Niclas Hoyer wrote:
Unfortunately, it seems that the tar file, that HID uploaded is not correct:
$ tar xvf ifdok_cm4040_lnx_x64-2.0.0.tar.gz
.gz requires z:
tar xzvf ifdok_cm4040_lnx_x64-2.0.0.tar.gz
--
@MartinPaljak.net
+3725156495
On 11/23/11 1:06 , Jean-Michel Pouré - GOOZE wrote:
ACS ACR83U-A1
Is it different (and how) from the version that does not have U-A1
appended ? (which I have) Also, do you have documentation for the
reader? That would be good to have, as there are obviously restrictions.
ACS APG8201
This looks
Hello!
On Tue, Nov 15, 2011 at 23:25, Frank Morgner
morg...@informatik.hu-berlin.de wrote:
I was about to add PACE on the PC/SC level, but there are some puzzeling
changes in OpenSC from the last time when I read the source code. Back
then all control commands were accessed by sc_transmit_apdu
Hello,
On Wed, Nov 2, 2011 at 12:28, Johannes Becker
johannes.bec...@hrz.uni-giessen.de wrote:
A log file produced on Mac OS X 10.6.8 can be found on
http://www.uni-giessen.de/~g013/opensc/opensc-OSX-CardOS-debug.log
It seems there is a transaction failed error when sending 266 bytes,
which
Hello,
On 11/1/11 12:07 , Jean-Michel Pouré - GOOZE wrote:
We bought some SPR532.
They are old but good (in fact, the reference reader when I was working
on pinpad support in pcsc-lite/ccid). Make sure that the firmware is the
right version, they changed things back and forth several times.
Hello,
1. I filed for a security devroom again, I hope it will be accepted
(hey, they even resurrected the mailing list). The theme of the devroom
is (hardware) security / crypto
2. The scheme is the same as last year, except there should be a
(different) room for two days, where the second day
Hello,
On Mon, Oct 31, 2011 at 10:37, Jean-Michel Pouré - GOOZE
jmpo...@gooze.eu wrote:
It does not work in OpenSC. What kind of log should I sent OpenSC
mailing list?
I gave up bothering with APG8201 [1]. What kind of SCM pinpad readers
do you have, if not SPR532?
But the standard log of a
Hello,
On Tue, Oct 25, 2011 at 02:22, Andy Walls awa...@md.metrocast.net wrote:
If the offer here still stands:
http://www.opensc-project.org/pipermail/opensc-devel/2008-August/011252.html
http://www.opensc-project.org/opensc/wiki/RainbowIkeyFour
The best bet is to contact them again, maybe
Hello,
On Tue, Oct 25, 2011 at 10:30, Hans Witvliet h...@a-domani.nl wrote:
For tokens and full sized (ID-1) cards i suppose the ones from feitan
should work nicely.
But how about sim-sized (ID-000)?
I'm sure there are several places in .nl where you can get your
(non-contactless) cards cut.
On Sat, Oct 8, 2011 at 17:58, Jean-Michel Pouré - GOOZE
jmpo...@gooze.eu wrote:
TrueCrypt x64 is able to detect OpenSC x32 pkcs11 libraries, not OpenSC
x64 libraries.
TrueCrypt, like many other end user applications, is a *32* bit app.
___
Hello,
On Mon, Oct 10, 2011 at 12:27, Anders Rundgren
anders.rundg...@telia.com wrote:
Is there any support for trusted (OS-level) PIN input in OpenSC?
Trusted path for me means guaranteed by tamper-proof mechanisms, which
usually means separate hardware-guaranteed channel, which in turn
would
Hello,
On Tue, Oct 4, 2011 at 17:56, Frank Morgner
morg...@informatik.hu-berlin.de wrote:
Hi!
You can add Reiner SCT's cyberJack RFID komfort and cyberJack RFID
standard to this list (both also support SM, which is absolutely
transparent to the application). I have been told that
On 10/4/11 7:40 , Stef Walter wrote:
reader-pcsc.c:243:pcsc_transmit: reader 'Feitian SCR310 01 00'
apdu.c:184:sc_apdu_log:
Outgoing APDU data [5 bytes] =
00 B2 01 04 00 .
==
Hello,
On 10/3/11 3:02 , Jean-Michel Pouré - GOOZE wrote:
1) What is OpenSC/libccid current PINPAD support? I have to admit last
time I used PINPAD was more than a year ago.
What exactly is your question? The support for pinpads has been there
for several years for now. As noted in code, it
Hello,
On Mon, Oct 3, 2011 at 16:07, Ludovic Rousseau
ludovic.rouss...@gmail.com wrote:
Some pinpad readers have what they call a firewall. The reader will
not allow you to use a VERIFY command without using the pinpad feature
i.e. it is not possible to send a PIN 'in the clear' to the card
Hello,
On 9/19/11 11:25 , Hannu Kotipalo wrote:
I succeeded in configuring pkcs11-pam module to use Identity card issued
by Finnish goverment. Also, smart card with cacert certificates works ok
(certificates ar stored on Aventra MyEID cards).
Great!
However, there seems to be some problem
Hello,
On 9/21/11 6:52 , Douglas E. Engert wrote:
Back to the master plan.
Yes. I was off for 5 days in Brussels for BruCON (which was great!), so
back to things and plans.
Would it help to for a developer to rebase their changes as you add
other changes?
Yes.
Viktor said on 8/11/2011:
I
Hello,
On Sep 18, 2011, at 12:17 , Anders Rundgren wrote:
It seems that there are big hopes associated with Microsoft's MiniDriver.
From where?
I don't understand why because it is poorly documented, has zero
standards status, and has AFAIK only been implemented in Windows.
And will only be
Hello,
The included patch [1] fixes the usage text and also the man page to reflect
the fact that specifying the module is mandatory.
Not the most elegant one (abuses app_name) but works.
0001-pkcs11-tool-update-help-and-man-page-to-reflect-the-.patch
Description: Binary data
[1]
Hello,
On Sep 16, 2011, at 11:39 , Mike Tancsa wrote:
For some reason, this does not work on 12.x ? It just comes up with a
usage error.
# pkcs11-tool -v -O
Usage: pkcs11-tool [OPTIONS]
Options:
--module argSpecify the module to load (mandatory)
The Usage: line should be
Hello,
On 13/09/11 05:35, 周彥江 wrote:
I have some TaiwanEid tokens and interesting in OpenSC. How should I
make some contribution on the project? I am a C# / Java programmer.
Great! Start by updating the wiki [1] with factual information to
include relevant bits and pieces (card, ATR, known
On Fri, Sep 9, 2011 at 01:56, Nikos Mavrogiannopoulos n...@gnutls.org wrote:
On 09/06/2011 03:38 PM, Martin Paljak wrote:
I'm trying to use the opensc 0.12.x ECDSA support, to allow ECDSA
signing in gnutls via PKCS #11. However I have no such cards to test it.
Do you have any suggestion
Hello,
Autumn has started (at least in northern hemisphere) so it is time to
pull together next OpenSC release.
Things to do that should be cleaned up into hopefully self-contained
patches:
- secret key object signature (Viktor and Douglas have different
signatures) [1]
- secure messaging, at
On Fri, Sep 9, 2011 at 10:39, Viktor Tarasov viktor.tara...@gmail.com wrote:
Le 09/09/2011 09:23, Martin Paljak a écrit :
If we omit loadable modules, we could also take that ATR tables are
indeed static and do not need to be released? Is this correct?
Exact.
Only loadable module prevents
On 09/09/11 11:32, Viktor Tarasov wrote:
Le 09/09/2011 10:09, Martin Paljak a écrit :
On Fri, Sep 9, 2011 at 10:39, Viktor
Tarasovviktor.tara...@gmail.com wrote:
Le 09/09/2011 09:23, Martin Paljak a écrit :
If we omit loadable modules, we could also take that ATR tables are
indeed static
Hello,
On Thu, Sep 8, 2011 at 13:27, j.witvl...@mindef.nl wrote:
According to the openvpn-docu, (at the server-side) one of their environment
variables, tls_id_0 should contain the hexadecimal value of the certificate.
In reality in contains completely other fields, like CN=, OU=, O= and C=.
Hello,
On Wed, Sep 7, 2011 at 09:10, Dan Peterson drpeter...@es.net wrote:
Could be.
I don't think the problem is same by nature.
I have or can create debug logs if anyone is interested.
I an looking into if this happens on the MAC code base as well, I think it
does but I am not sure
I
Hello,
On 06/09/11 09:47, HOURY William wrote:
I have been asked the Export Control Classification Number (ECCN)
number for OpenSC.
Never heard.
Does anyone know it ? Should it be 5D002 ?
Could be 5D992 as well. If you ever find out from authoritative source
please enlighten others as well.
Hello,
On Aug 29, 2011, at 7:53 , Viktor Tarasov wrote:
I committed the initial version of the minidriver in 'write' mode.
https://github.com/viktorTarasov/OpenSC/commits/minidriver-write-mode
There are some changes that concerns both 'write' and 'read-only' modes:
-- the content of
Hello,
I'll most probably be visiting Brucon [1] next month.
Anyone else planning to visit it or will be around 17..21 September to have a
chitchat on smart cards etc over some fine Belgian beer?
Martin
[1] http://2011.brucon.org/index.php/Main_Page
--
@MartinPaljak.net
+3725156495
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Hello,
I observed something interesting when scanning the command space
(CLA+INS) of a card with a few different readers (CardMan1021 and
Gemalto EzioShieldPinPad among others)
Certain INS codes fail with transaction failed on CardMan1021
whereas
Hello,
On Thu, Aug 25, 2011 at 14:47, Ludovic Rousseau
ludovic.rouss...@gmail.com wrote:
The realy strange situation is that you can have a working T=0
card+reader with these invalid INS bytes.
In your INS exploration program just skip 6X and 9X INS values.
Thanks for the explanation!
For
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Hello,
On 8/23/11 8:44 , Peter Marschall wrote:
On Sunday, 21. August 2011, you wrote:
On 08/21/2011 12:36 PM, Peter Marschall wrote:
* renable zlib readline support
i don't think these are compatible with the DFSG, alas.
GNU readline (at
On 8/23/11 11:46 , Ludovic Rousseau wrote:
2011/8/23 Martin Paljak mar...@martinpaljak.net:
Is there any way to have OpenSC build against some crypto
libraries other than OpenSSL (preferably licensed in
GPL-compatible ways) so we could link it to readline without
violating one license
Hello,
On Aug 18, 2011, at 12:11 , Hans Witvliet wrote:
Hi all,
Perhaps a ludicreous question, but i post it anyway...
Some creditcard companies or banks supply their customer with cards plus
pin-code in order to identify themselfs during financial transactions.
From my focus i presume
Hello,
On 8/18/11 10:57 , sibu xolo wrote:
error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt
error:0906A065:PEM routines:PEM_do_header:bad decrypt
error: Unable to read private key from mykey.pem
...
I have two passphrases I used whan I gnerated the key; the passhrase
Hello,
On Wed, Aug 17, 2011 at 23:39, Douglas E. Engert deeng...@anl.gov wrote:
--- a/src/libopensc/card-gemsafeV1.c
+++ b/src/libopensc/card-gemsafeV1.c
@@ -172,6 +172,7 @@ static int gemsafe_init(struct sc_card *card)
/* SELECT applet */
r = gp_select_applet(card,
On 18/08/11 17:34, Douglas E. Engert wrote:
The patch was in the spirit of the current code, that already does
card-lock_count++; before this, and card-lock_count--; after this.
Ah, a good thing to grep for :)
Thanks,
Martin
___
opensc-devel mailing
1 - 100 of 891 matches
Mail list logo
