Re: [opensc-devel] Help needed building from WIX without Visual Studio

2011-04-08 Thread Martin Paljak
Hello, On Apr 7, 2011, at 23:58 , Jean-Michel Pouré - GOOZE wrote: Le mercredi 06 avril 2011 à 22:33 +0200, Jean-Michel Pouré - GOOZE a écrit : Would it be possible to have a simple build script using candle without Visual Studio? There used to be a script, but it was removed. I looked

Re: [opensc-devel] [opensc-commits] svn opensc changed[5307] msi: no need backslash after [INSTALLDIR]

2011-04-08 Thread Martin Paljak
Hello, On Apr 8, 2011, at 10:22 , Viktor TARASOV wrote: Le 07/04/2011 20:51, Jean-Michel Pouré - GOOZE a écrit : Le jeudi 07 avril 2011 à 19:26 +0200, Viktor TARASOV a écrit : Can be included into MSI the card specific registers related to the minidriver ? It could be a part of a custom MSI

Re: [opensc-devel] Object flags on smarcard

2011-04-08 Thread Martin Paljak
On Apr 8, 2011, at 18:55 , Jean-Michel Pouré - GOOZE wrote: For knowledge, I would like to know to which extent tags are standards and documented in reference documents. Which ones you think are not standard? X509 (what are properties and usage flags of keys):

Re: [opensc-devel] Configuring OpenSC mini-drivers for Win7

2011-04-05 Thread Martin Paljak
On Apr 5, 2011, at 12:41 , Jean-Michel Pouré - GOOZE wrote: Le lundi 04 avril 2011 à 19:21 +0300, Martin Paljak a écrit : With *minidriver*. Yes. But no documentation yet: https://www.opensc-project.org/opensc/wiki/NightlyBuilds Many thanks! Great! I downloaded OpenSC Win x64 nightly

Re: [opensc-devel] Windows building and MSI

2011-04-04 Thread Martin Paljak
On Apr 4, 2011, at 11:47 , Viktor TARASOV wrote: Le 04/04/2011 10:28, Martin Paljak a écrit : On Apr 1, 2011, at 20:02 , Martin Paljak wrote: * Installation location. The distributed DLL-s should IMO go to Windows folder. The three files that should go to system32 or equivalent

Re: [opensc-devel] Windows building and MSI

2011-04-04 Thread Martin Paljak
On Apr 4, 2011, at 11:39 , Peter Stuge wrote: Martin Paljak wrote: * File versioning. Current .rc uses the libtool related version in the file versioning which is not optimal. It has to my knowledge no relation to the libtool interface versioning. Versions from OpenSC version and SVN

Re: [opensc-devel] OpenSC with cardmod MSI

2011-04-04 Thread Martin Paljak
On Apr 4, 2011, at 18:47 , Jean-Michel Pouré - GOOZE wrote: Are there builds available of OpenSC with cardmod for testing? With *minidriver*. Yes. But no documentation yet: https://www.opensc-project.org/opensc/wiki/NightlyBuilds ___ opensc-devel

Re: [opensc-devel] Fwd: a little love for opensc-explorer.c

2011-03-31 Thread Martin Paljak
Hello Peter, On Sun, Mar 20, 2011 at 13:08, Peter Marschall pe...@adpm.de wrote: please find attached a few patches for opensc-explorer.c It would be cool if the changes made it into OpenSC mainline Done in r5277-5280. Thanks! ___ opensc-devel

Re: [opensc-devel] Compiling for windows in Fedora 14

2011-03-31 Thread Martin Paljak
Hello, On Mar 31, 2011, at 14:15 , jons...@terra.es wrote: Some notices on compile for windows under Fedora 14 1- In file win32/installer_from_build.sh Fedora mingw compiler uses a different name: - # Ubuntu 10.10 (as wiki states) # (cd ${build_dir};

Re: [opensc-devel] Rv: Compiling for windows in Fedora 14

2011-03-31 Thread Martin Paljak
Hello, On Mar 31, 2011, at 14:22 , jons...@terra.es wrote: Sorry: I forgot last notice: My Fedora installation has default language set to ES, so wine looks for iscc.exe at ${HOME}/.wine/drive_c/Archivos de programa/Inno Setup 5/ISCC.exe instead of ${HOME}/.wine/drive_c/Program Files/Inno

Re: [opensc-devel] Comments on r5273 and r5274

2011-03-30 Thread Martin Paljak
On Mar 30, 2011, at 13:22 , jons...@terra.es wrote: 2011/3/30 jons...@terra.es jons...@terra.es: In my case Spanish C3PO's LTC31 (reported name 'C3PO LTC31 00 00' ) claims for having pinpad support but I'cannot see any pinpad :-) Can you send me the output.txt file for this

Re: [opensc-devel] Comments on r5273 and r5274

2011-03-30 Thread Martin Paljak
On Mar 30, 2011, at 12:47 , jons...@terra.es wrote: 1- An stupid bug in piv-tool.xml: ( a missing para start tag ) Fixed in 5276, thanks! 2- Not sure about the usage of card reader black list on broken readers: What these black list is intended for? - To enumerate readers that send pin

Re: [opensc-devel] OpenSC DLL

2011-03-25 Thread Martin Paljak
Hello, On Mar 25, 2011, at 16:19 , Douglas E. Engert wrote: On 3/25/2011 9:03 AM, Brian Thomas wrote: Is there any documentation on the OpenSC 12 DLL? I would like to write a LabVIEW application for configuring smartcards for out VV needs. I have no idea what functions to call or what order

Re: [opensc-devel] [pam_pkcs11] improved error messages

2011-03-21 Thread Martin Paljak
Hello, Mailing list should eat attachments just fine (50KB limit IIRC) On Mar 20, 2011, at 8:00 PM, Dominik Fischer wrote: It adds displaying error messages to the user via pam_prompt. Because in GDM the messages disappear so quick, I've added a new option err_display_time. After a message

Re: [opensc-devel] fixes for a few glitches in card-opengpg.c

2011-03-21 Thread Martin Paljak
Hello Peter, On Mar 20, 2011, at 12:24 PM, Peter Marschall wrote: Please find attached a few patches to src/libopensc/card-openpgp.c Before I go on testing with CryptoStick (OpenPGP v2.0) could you explain what happens with the overall behavior of OpenSC after your patches? Do you get further

Re: [opensc-devel] Problems with starcos spk 2.4 and opensc-pkcs11.so

2011-03-21 Thread Martin Paljak
Hello, On Mar 19, 2011, at 11:12 PM, Felipe Blauth wrote: However, I still can't generate a key pair neither coding directly against PKCS#11 API (with opensc-pkcs11.so) nor using pkcs11-tool (I get CKR_GENERAL_ERROR). a) have you tried with OpenSC 0.12.0? b) can you provide the debug

Re: [opensc-devel] How to make proper use of sc_card_cache

2011-03-21 Thread Martin Paljak
Hello, On Mar 17, 2011, at 4:37 PM, Frank Morgner wrote: I also need to get a clearer picture. Probably we should create 'SM' dedicated wiki page and there to resume the specifications and architectural approaches . Has there been any progress or even some results on the discussion about SM

Re: [opensc-devel] pkcs11-tool: Failed to load pkcs11 module

2011-03-21 Thread Martin Paljak
Hello, On Mar 14, 2011, at 12:18 AM, Juan Antonio Martinez wrote: Using opensc from svn: [jantonio@router opensc]$ src/tools/pkcs11-tool -lO error: Failed to load pkcs11 module Aborting. Looking at src/pkcs11/pkcs11-tool.c seems that opt_module variable is not properly initialized thus

[opensc-devel] Windows building and MSI

2011-03-21 Thread Martin Paljak
Hello, On Mar 12, 2011, at 4:20 PM, webmas...@opensc-project.org wrote: Revision: 5226 Author: vtarasov Date: 2011-03-12 14:20:13 + (Sat, 12 Mar 2011) Log Message: --- msi: include 'cardmod.dll' and 'rutoken' PKCS#15 profiles into MSI For easily repeatable builds and

Re: [opensc-devel] Gnome smartcard manager

2011-03-13 Thread Martin Paljak
On Mar 12, 2011, at 3:19 PM, Mr Dash Four wrote: One of the reasons to subscribe to the list many months ago was that I wanted to use Gnome Smartcard Manager but it wasn't working (at least not in FC13) :-X I guess you are mixing up two things: Gnome Display Manager (which takakes care of

Re: [opensc-devel] Gnome smartcard manager

2011-03-13 Thread Martin Paljak
Hello, On Mar 12, 2011, at 10:16 AM, Ludovic Rousseau wrote: Le 12 mars 2011 08:49, Jean-Michel Pouré - GOOZE jmpo...@gooze.eu a écrit : Dear Friends, Just a quick note that I stumbled upon Gnome Smartcard Manager, which seems to be a Redhat project based on OpenSC:

Re: [opensc-devel] Gnome smartcard manager

2011-03-13 Thread Martin Paljak
On Mar 12, 2011, at 3:22 PM, Mr Dash Four wrote: I don't think RedHat is using OpenSC. They have a PKCS#11 token called coolkey. Coolkey is already available in Debian at http://packages.debian.org/source/sid/coolkey They do! The configuration file(s) default to coolkey, but opensc/openct

Re: [opensc-devel] Gnome smartcard manager

2011-03-13 Thread Martin Paljak
received from a few members on this list, Andre Zepezauer, Ludovic Rousseau, Martin Paljak and Peter Stuge to name a few. There are two things to do here: a) provide up to date packages of all software that deals with the smart card experience (from CCID to NSS/Firefox combo) b) provide

Re: [opensc-devel] ACOS 5

2011-03-05 Thread Martin Paljak
Hello, On Mar 6, 2011, at 8:38 AM, Travis wrote: What is the status of support for the ACOS 5? It seems that the last real inquiry was in August of last year. No support at the moment. I just purchased the ACS ACOS5 SDK. It has a PKCS#11 driver; but I was hoping to find an open source

Re: [opensc-devel] STARCOS OpenSC 12

2011-03-02 Thread Martin Paljak
Hello, On Mar 1, 2011, at 4:13 PM, Brian Thomas wrote: Is the STARCOS SPK 2.3 smart card supported by OpenSC version 12? I cannot initialize (pkcs15-init –CT) this card with OpenSC version 11.13 but not with version 12. The error message returned is: “Security Status not satisfied” If it

Re: [opensc-devel] PKCS#11 glue project

2011-02-28 Thread Martin Paljak
Hello, On Feb 23, 2011, at 10:14 AM, Stef Walter wrote: Hi guys. As a follow up from the security devroom at FOSDEM, I'm working out hosting and mailing lists for the PKCS#11 glue stuff [1] that I talked about. This includes things like p11-kit, trust assertions, pkcs11 uris and more.

Re: [opensc-devel] Atomic cert import

2011-02-28 Thread Martin Paljak
Hello, On Feb 28, 2011, at 2:44 PM, NdK wrote: Could it be possible to check the available space on card files before importing PKCS12 certs? Or at least rollback already done additions. Rollback would be a nice feature. Now it could easily happen that a cert is only partially stored, since

Re: [opensc-devel] [opensc-commits] svn opensc changed[5215] Allow a key to be used to sign a certificate request

2011-02-25 Thread Martin Paljak
Hello, On Feb 25, 2011, at 7:20 PM, webmas...@opensc-project.org wrote: --- Allow a key to be used to sign a certificate request even if the normal usage does not allow sign. This is need when initializing a card when called by OpenSSL req -engine Actually it would be nice to

Re: [opensc-devel] Documentation sanity checks

2011-02-25 Thread Martin Paljak
On Feb 25, 2011, at 7:22 PM, Brian Thomas wrote: The subject of the requirement is to verify that malformed or incomplete certificates cannot be loaded on to the card. I'd assume OpenSSL (which is used to read and parse the certificates) does some basic syntax/format checks. But go on, verify

[opensc-devel] Google Summer Of Code application?

2011-02-24 Thread Martin Paljak
Hello, What about submitting a GSOC application [1] with a few grand master plans that could be fixed/improved in either OpenSC (like revamping MuscleApplet) or fix something else in the ecosystem (p11-glue might be interesting, if that could be planned without too much experimentation) ?

Re: [opensc-devel] ssh error

2011-02-23 Thread Martin Paljak
Hello, On Feb 23, 2011, at 4:26 PM, NdK wrote: I'm always the one that finds problems :) That's great testing! Waiting to fix CA issue, I'm trying to use an on-card key to authenticate a SSH user. Which issue? But when I try to use it, I get: -8-- $ ssh otheruser@myhost Enter PIN for

Re: [opensc-devel] Implement PIN retries in entersafe driver

2011-02-22 Thread Martin Paljak
Hello, On Tue, Feb 22, 2011 at 07:31, Xiaoshuo Wu xiaos...@ftsafe.com wrote: Index: src/libopensc/card-entersafe.c === --- src/libopensc/card-entersafe.c      (revision 5121) +++ src/libopensc/card-entersafe.c      (working copy)

Re: [opensc-devel] PKCS#11 C_DeriveKey for ECDH1_COFACTOR_DERVIVE for PIV cards

2011-02-21 Thread Martin Paljak
Hello, On Feb 21, 2011, at 10:23 PM, Douglas E. Engert wrote: I would like to C_DeriveKey support to OpenSC, to the derivation capabilities of a smartcard. Although RSA can do key derivation, I am interested in CKM_ECDH1_COFACTOR_DERIVE which is supported in the newer PIV cards. (There is

Re: [opensc-devel] Reading PKCS15 PIN max attempt number

2011-02-21 Thread Martin Paljak
On Feb 22, 2011, at 9:20 AM, Toni Sjoblom - Aventra wrote: Hi, -Original Message- From: opensc-devel-boun...@lists.opensc-project.org [mailto:opensc-devel-boun...@lists.opensc-project.org] On Behalf Of Andreas Jellinghaus not sure about athena, but many cards return the number

Re: [opensc-devel] Implement PIN retries in entersafe driver

2011-02-20 Thread Martin Paljak
Hello, On Feb 20, 2011, at 10:59 AM, Jean-Michel Pouré - GOOZE wrote: Le vendredi 18 février 2011 à 13:59 +0800, Xiaoshuo Wu a écrit : I've added SC_PIN_CMD_GET_INFO handling in entersafe_pin_cmd(), C_GetTokenInfo() will get PIN retries now, you can run pkcs11-tool --test-hotplug to see

Re: [opensc-devel] CA key on card: how?

2011-02-19 Thread Martin Paljak
On Feb 18, 2011, at 11:54 AM, NdK wrote: Il 18/02/2011 07:07, Martin Paljak ha scritto: Yup. That's why keys are generated on card :) Unless the key is exportable Always asked why one needs to mark a private key exportable: if you need it exportable, create it externally and load

Re: [opensc-devel] Helping reporting bugs with a template?

2011-02-18 Thread Martin Paljak
Hello, On Feb 18, 2011, at 6:45 PM, Ludovic Rousseau wrote: Is it possible to have templates in bug reports with trac? I could not find anything like that. But I am not a trac admin. I can use an URL like https://www.opensc-project.org/opensc/newticket?description=foobar but I don't know

Re: [opensc-devel] Comments on R5212 cardmod changes for use with Makefile.mak

2011-02-18 Thread Martin Paljak
Hello, On Feb 18, 2011, at 11:17 PM, Douglas E. Engert wrote: The _WIN32_WINNT was change to 502 which supports XP SP2 and 2003 SP1 and above. If there is some reason to support any systems older then these, place change this back. (VS 2010 may mot support anything less then 502.) That's

Re: [opensc-devel] Strange VS preprocessor behavior

2011-02-17 Thread Martin Paljak
On Feb 17, 2011, at 7:56 PM, Viktor TARASOV wrote: Hi, I'm trying to compile OpenSC on the Windows Server 2008 R2 Enterprise OS 64-bit using compiler Microsoft (R) 32-bit C/C++ Optimizing Compiler Version 16.00.30319.01 for 80x86 installed with Visual Studio v10.0 It seems that for

Re: [opensc-devel] CA key on card: how?

2011-02-17 Thread Martin Paljak
Hello, On Feb 18, 2011, at 12:30 AM, NdK wrote: On 17/02/2011 22:55, Andreas Jellinghaus wrote: no, that wiki page is correct and works for me - done it a hundred times. it uses the key on the card, and the card does the signature (you cannot read the private key, a smart card won't ever

Re: [opensc-devel] [opensc-commits] svn opensc changed[5199] IAS/ECC: for the IAS/ ECC cards include into the OpenSC configuration the 'card_atr' sections

2011-02-16 Thread Martin Paljak
On Feb 16, 2011, at 1:01 PM, webmas...@opensc-project.org wrote: Revision: 5199 Author: vtarasov Date: 2011-02-16 11:01:46 + (Wed, 16 Feb 2011) Log Message: --- IAS/ECC: for the IAS/ECC cards include into the OpenSC configuration the 'card_atr' sections Why are these

Re: [opensc-devel] [opensc-commits] svn opensc changed[5195] card-piv: 'ssize_t' is not defined when compiling with Visual Studio

2011-02-16 Thread Martin Paljak
Hello, On Feb 16, 2011, at 12:32 PM, webmas...@opensc-project.org wrote: --- card-piv: 'ssize_t' is not defined when compiling with Visual Studio (I'm on the road not connected to work PC with git and more links, but some comments nevertheless) Windows does have SSIZE_T. But Windows

Re: [opensc-devel] Multiple certs on a MyEID card?

2011-02-16 Thread Martin Paljak
Hello, On Feb 15, 2011, at 5:26 PM, Jean-Michel Pouré - GOOZE wrote: Le lundi 14 février 2011 à 17:52 +0100, Andreas Jellinghaus a écrit : fine tuning for each different card and driver: I don't think anyone has the time and manpower for that. Tuning each and every card driver is of course

Re: [opensc-devel] Multiple certs on a MyEID card?

2011-02-16 Thread Martin Paljak
On Feb 16, 2011, at 10:49 AM, Viktor TARASOV wrote: On 15.02.2011 19:50, NdK wrote: On 15/02/2011 19:47, Viktor TARASOV wrote: Sorry, this card can gen/home/vtarasov/projects/llvm/build/Debug+Asserts/bin/clangerate key 512bit . For that the corresponding algorithm should be added to the

Re: [opensc-devel] [opensc-commits] svn opensc changed[5199] IAS/ECC: for the IAS/ ECC cards include into the OpenSC configuration the 'card_atr' sections

2011-02-16 Thread Martin Paljak
Hello, On Feb 16, 2011, at 5:19 PM, Viktor TARASOV wrote: On 16.02.2011 13:34, Martin Paljak wrote: On Feb 16, 2011, at 1:01 PM, webmas...@opensc-project.org wrote: Revision: 5199 Author: vtarasov Date: 2011-02-16 11:01:46 + (Wed, 16 Feb 2011) Log Message: --- IAS/ECC

Re: [opensc-devel] Multiple certs on a MyEID card?

2011-02-16 Thread Martin Paljak
On Feb 16, 2011, at 10:31 PM, NdK wrote: On 16/02/2011 21:13, Martin Paljak wrote: The same can be done for 768bit key, and, I suppose, for all key sizes from 512 to 2048 with the 64 bit step. The only questions is: are you sure you want to do this? Small RSA keys are often used in low

Re: [opensc-devel] [opensc-commits] [OpenSC] #323: Remove hard dependency on libltdl in favor of direct native API.

2011-02-16 Thread Martin Paljak
On Feb 16, 2011, at 11:10 PM, Douglas E. Engert wrote: Now to try and build on Windows native. http://martinpaljak.net:/job/OpenSC%20win32%20psdk/ -- @MartinPaljak.net +3725156495 ___ opensc-devel mailing list

Re: [opensc-devel] Multiple certs on a MyEID card?

2011-02-14 Thread Martin Paljak
Hello, On Feb 14, 2011, at 11:08 PM, NdK wrote: On 14/02/2011 17:52, Andreas Jellinghaus wrote: I have no clue about myeid, but some other cards are only 32k for example. reserving 8192 would be 25% and that is only one directory file... Well, javacards have a limit of 32k of data, IIUC,

Re: [opensc-devel] Multiple certs on a MyEID card?

2011-02-13 Thread Martin Paljak
Hello, On Feb 13, 2011, at 2:59 PM, NdK wrote: $ pkcs15-init -S startssl.p12 -f PKCS12 -i 45 -a 2 -l StartSSL auth Using reader with a card: Gemalto GemPC Twin 00 00 error:23076071:PKCS12 routines:PKCS12_parse:mac verify failure Is this error normal? Does it happen with OpenSSL command line

Re: [opensc-devel] Multiple certs on a MyEID card?

2011-02-13 Thread Martin Paljak
Hello, On Feb 14, 2011, at 12:47 AM, NdK wrote: On 13/02/2011 21:18, Martin Paljak wrote: $ pkcs15-init -S startssl.p12 -f PKCS12 -i 45 -a 2 -l StartSSL auth Using reader with a card: Gemalto GemPC Twin 00 00 error:23076071:PKCS12 routines:PKCS12_parse:mac verify failure Is this error normal

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-11 Thread Martin Paljak
Hello, On Tue, Feb 8, 2011 at 22:42, Douglas E. Engert deeng...@anl.gov wrote: On 2/8/2011 1:29 PM, Andre Zepezauer wrote: Hello Douglas, please have a look at that picture [1]. FYI the cardmod resides on the same level as OpenSC.tokend does. As you can see, there is a clear distinction

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-11 Thread Martin Paljak
On Fri, Feb 4, 2011 at 01:19, Andre Zepezauer andre.zepeza...@student.uni-halle.de wrote: BTW: The main handle in OpenSC is 'sc_pkcs15_card_t' and not 'sc_context_t'. In fact 'sc_context_t' is really unimportant. But sc_pkcs15_card_t holds all the operational state the is required to make

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-11 Thread Martin Paljak
On Feb 11, 2011, at 6:39 PM, Douglas E. Engert wrote: Platform adapters should be core of OpenSC. How they are bundled in terms of source packages or distributed as binaries is a different story. But conceptually they are part of OpenSC, not external applications. So based on my comments

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-11 Thread Martin Paljak
On Feb 11, 2011, at 6:55 PM, Douglas E. Engert wrote: On 2/11/2011 3:24 AM, Martin Paljak wrote: On Fri, Feb 4, 2011 at 01:19, Andre Zepezauer andre.zepeza...@student.uni-halle.de wrote: BTW: The main handle in OpenSC is 'sc_pkcs15_card_t' and not 'sc_context_t'. In fact 'sc_context_t

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-11 Thread Martin Paljak
On Feb 11, 2011, at 9:10 PM, Andre Zepezauer wrote: On Fri, 2011-02-11 at 11:24 +0200, Martin Paljak wrote: On Fri, Feb 4, 2011 at 01:19, Andre Zepezauer andre.zepeza...@student.uni-halle.de wrote: BTW: The main handle in OpenSC is 'sc_pkcs15_card_t' and not 'sc_context_t'. In fact

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-11 Thread Martin Paljak
On Feb 11, 2011, at 10:06 PM, Douglas E. Engert wrote: On 2/11/2011 11:43 AM, Martin Paljak wrote: On Feb 11, 2011, at 6:55 PM, Douglas E. Engert wrote: On 2/11/2011 3:24 AM, Martin Paljak wrote: On Fri, Feb 4, 2011 at 01:19, Andre Zepezauer andre.zepeza...@student.uni-halle.de wrote

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-11 Thread Martin Paljak
On Feb 11, 2011, at 9:47 PM, Douglas E. Engert wrote: On 2/11/2011 11:35 AM, Martin Paljak wrote: Didn't you include the sc_ctx_detect_readers realignment patch that removed it from create context to the responsibility of calling application? (will check and include it otherwise

[opensc-devel] FOSDEM2011 slides and videos

2011-02-10 Thread Martin Paljak
Hello, The slides and videos from the security devroom at FOSDEM 2011 are now available from the wiki: http://www.opensc-project.org/opensc/wiki/FOSDEM2011 If you missed FOSDEM this year, I suggest you try harder next year, it is a great event :) Best, Martin -- @MartinPaljak.net

Re: [opensc-devel] Building, testing and engaging companies for OpenSC 0.12.1

2011-02-10 Thread Martin Paljak
Hello, On Jan 24, 2011, at 6:07 PM, Martin Paljak wrote: The next step, for next release, is to get automated (nightly) builds and automated tests. After re-doing the hudson/jenkins installation a few times, the preliminary result is here: Mr. Jenkins for OpenSC - http://martinpaljak.net

Re: [opensc-devel] Feitian PKI speed

2011-02-09 Thread Martin Paljak
Jean-Michel, On Feb 8, 2011, at 11:17 AM, Jean-Michel Pouré - GOOZE wrote: Le mardi 08 février 2011 à 09:08 +0100, Ludovic Rousseau a écrit : It is _expected_ to have a _highly_ variable time for prime number generators. This is understood now. So please let us remove key generation time on

Re: [opensc-devel] Feitian PKI speed

2011-02-09 Thread Martin Paljak
Hello, On Feb 8, 2011, at 2:26 PM, Jean-Michel Pouré - GOOZE wrote: On mailing list, this kind of remark is meant to start a flame war. Comparing the speed of two cars makes sense, comparing the speed of two cards is absurd. The RSA generation time can be a sign of speed, accuracy,

Re: [opensc-devel] Feitian PKI speed

2011-02-08 Thread Martin Paljak
Hello, On Feb 7, 2011, at 7:43 PM, Jean-Michel Pouré - GOOZE wrote: Le lundi 07 février 2011 à 17:25 +0100, Peter Stuge a écrit : Maybe more extensive testing could be done. Higher precision timing, and say 1000 or 1 cycles. Okay, I understand what you mean. Timing is different and

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-04 Thread Martin Paljak
Hello, On Feb 3, 2011, at 11:14 PM, Andre Zepezauer wrote: On Thu, 2011-02-03 at 14:04 -0600, Douglas E. Engert wrote: I have updates #321 with a new version of the cardmod patch and would like to start to commit it in pieces. Piece 1 is the attachment I sent on 1/28 as new.martin.patch

Re: [opensc-devel] Braking change in OpenSC 0.12.0 tokenInfo

2011-02-04 Thread Martin Paljak
On Feb 4, 2011, at 2:11 PM, Toni Sjöblom - Aventra wrote: Hi, -Original Message- From: Andre Zepezauer [mailto:andre.zepeza...@student.uni-halle.de] Sent: 23. tammikuuta 2011 4:45 On Sat, 2011-01-22 at 15:42 +0200, Martin Paljak wrote: On Jan 21, 2011, at 9:33 AM, Aventra wrote

Re: [opensc-devel] r5124

2011-02-03 Thread Martin Paljak
Hello, On Thu, Jan 27, 2011 at 20:08, Andre Zepezauer andre.zepeza...@student.uni-halle.de wrote: Hello Martin, some comments on r5124: 1. The values of pin_info-reference and prkey_info-key_reference shouldn't be compared because: * pin_info-reference is used as P2 parameter in VERIFY

Re: [opensc-devel] r5124

2011-02-03 Thread Martin Paljak
On Feb 3, 2011, at 3:22 PM, Andre Zepezauer wrote: That patch could be some lines shorter when using sc_pkcs15_compare_id(). Additionally that would improve readability. I don't know what kind of function you did mean. Extracting only that patch into a new function? I mean the lookup

Re: [opensc-devel] OpenSC on Android

2011-02-03 Thread Martin Paljak
Hello, On Jan 26, 2011, at 10:09 AM, Ludovic Rousseau wrote: I just found the page SmartCardPKI [1] on the seek-for-android project. The goal is to build OpenSC for Android. They provide a patch [2] but I do not remember reading any discussion about it on the OpenSC mailing lists. Maybe they

Re: [opensc-devel] sc_ctx_detect_readers patch

2011-02-03 Thread Martin Paljak
On Feb 3, 2011, at 10:04 PM, Douglas E. Engert wrote: I have updates #321 with a new version of the cardmod patch and would like to start to commit it in pieces. Piece 1 is the attachment I sent on 1/28 as new.martin.patch based on Martin's patch from 1/19. This was the patch that would

[opensc-devel] T-shirts with OpenSC for FOSDEM

2011-01-31 Thread Martin Paljak
Hello, I'll make a T-shirt for FOSDEM. Nothing fancy, just text. Protect Your Privates (front) OpenSC ... use a smart card! (back) I could produce and bring a few extra matching copies if there's interest. Drop me a line before Wednesday with your size if you are interested, the cost of the

Re: [opensc-devel] PCSC api questions

2011-01-31 Thread Martin Paljak
Hello, On Jan 31, 2011, at 10:18 PM, Andreas Jellinghaus wrote: Am Montag 31 Januar 2011, um 10:35:47 schrieb Ludovic Rousseau: I don't know if it is possible to specify a PPS. It is not possible to do that using pcsc-lite unless the driver has support for it. ok, thanks for the advice!

Re: [opensc-devel] Smartcards random number generator

2011-01-29 Thread Martin Paljak
Hello, On Jan 27, 2011, at 6:09 PM, Jean-Michel Pouré - GOOZE wrote: Le jeudi 27 janvier 2011 à 15:24 +0200, Martin Paljak a écrit : Sure. A random number generator (with different properties) is available in virtually any PKI card. Have you tried it? C_GenerateRandom Yes, I

[opensc-devel] FOSDEM Security / hardware crypto devroom update

2011-01-28 Thread Martin Paljak
Hello, (posted to opensc-devel to remind those who have not signed up to security-devroom list yet) == Information on OpenSC wiki has been updated and should be consulted for the latest status of things and for further pointers: http://www.opensc-project.org/opensc/wiki/FOSDEM2011 ==

Re: [opensc-devel] r5124

2011-01-28 Thread Martin Paljak
Hello, On Jan 27, 2011, at 8:08 PM, Andre Zepezauer wrote: some comments on r5124: 1. The values of pin_info-reference and prkey_info-key_reference shouldn't be compared because: * pin_info-reference is used as P2 parameter in VERIFY command * prkey_info-key_reference is used in MSE SET

Re: [opensc-devel] OpenSC on Android

2011-01-28 Thread Martin Paljak
Hello, On Jan 26, 2011, at 9:46 PM, Andreas Jellinghaus wrote: Am Mittwoch 26 Januar 2011, um 12:12:42 schrieb Nikos Mavrogiannopoulos: I don't understand what you mean by a reasonable enrollment system, however having seen the EMV protocol, I believe that the available PKCS #11 compatible

Re: [opensc-devel] Using Cardmod mini-driver on Vista with Login to AD

2011-01-28 Thread Martin Paljak
Hello, On Jan 28, 2011, at 12:36 AM, Douglas E. Engert wrote: The changes are large, and still not ready. The 3 changes I discussed on 1/19 are still in this patch. Martin is working on a different version of the don't run sc_ctx_detect_reader part of this patch. Martin, any idea when that

Re: [opensc-devel] Using Cardmod mini-driver on Vista with Login to AD

2011-01-28 Thread Martin Paljak
On Jan 28, 2011, at 9:21 PM, Douglas E. Engert wrote: There may be a better way, maybe using side by side assemblies, as if OpenSSL is included, it may want to load other dlls too. A static dll is the recommended way by Microsoft and easiest to manage (polluting system32 with random .dll-s

Re: [opensc-devel] Smartcards random number generator

2011-01-27 Thread Martin Paljak
On Jan 27, 2011, at 2:57 PM, Jean-Michel Pouré - GOOZE wrote: Can OpenSC / libp11 or any framework access the random number generator Sure. A random number generator (with different properties) is available in virtually any PKI card. Have you tried it? C_GenerateRandom -- @MartinPaljak.net

Re: [opensc-devel] Smartcards random number generator

2011-01-27 Thread Martin Paljak
On Jan 27, 2011, at 3:26 PM, Frank Morgner wrote: On Thursday, January 27 at 01:57PM, Jean-Michel Pouré - GOOZE wrote: Dear Friends, Can OpenSC / libp11 or any framework access the random number generator which is available in some cards, including the Feitian PKI? The card driver can

Re: [opensc-devel] Proposed cardmod patch

2011-01-25 Thread Martin Paljak
Hello, On Jan 24, 2011, at 10:11 PM, Douglas E. Engert wrote: On 1/24/2011 12:54 PM, Brian Thomas wrote: Hello, I strongly urge the OpenSC team to make this change to fix mini-driver compatibility. Yes, my company needs this because we just do, however by implementing this fix, it will

Re: [opensc-devel] [opensc-commits] Fwd: IAS sucks

2011-01-24 Thread Martin Paljak
Hello, On Jan 10, 2011, at 6:12 PM, Viktor TARASOV wrote: On 10.01.2011 16:01, Viktor TARASOV wrote: From:Andre Zepezauer andre.zepeza...@student.uni-halle.de it's hard to follow all the changes done in the last view days. Here some issues I found so far: I do my best, trying to

[opensc-devel] Building, testing and engaging companies for OpenSC 0.12.1

2011-01-24 Thread Martin Paljak
Hello all, OpenSC 0.12.0 includes scripts to reasonably automatically and repeatably build the installers on all supported platforms (and of course the standard targzip for Linux). The next step, for next release, is to get automated (nightly) builds and automated tests. This requires

Re: [opensc-devel] Building cardmod Mindriver using Build environment

2011-01-24 Thread Martin Paljak
Hello, On Jan 24, 2011, at 6:13 PM, Douglas E. Engert wrote: I agree with you on this, but there has not been much support for building on Windows and it has been hard to find Windows developers and getting Visual Studio installed is not easy. Alon and I had this discussion a few years ago.

Re: [opensc-devel] Fwd: IAS sucks

2011-01-24 Thread Martin Paljak
Hello, On Jan 24, 2011, at 3:17 PM, jons...@terra.es wrote: Not that I would want to suggest a 8 meters requirement [1], something should be done about it. [...] I agree: In the writting of Spanish DNIe LGPL driver I've found so many times that lack of information. A simple

Re: [opensc-devel] Proposed cardmod patch

2011-01-22 Thread Martin Paljak
Hello, On Jan 21, 2011, at 9:45 PM, Douglas E. Engert wrote: Attached is the patch to just do (2) below. I believe that this is the part that Brian wants to not call sc_ctx_detect_readers Martin you had said you want to do this differently so I will leave this up to you as to weither this is

Re: [opensc-devel] Braking change in OpenSC 0.12.0 tokenInfo

2011-01-22 Thread Martin Paljak
On Jan 21, 2011, at 9:33 AM, Aventra wrote: Could this fix that Andre has proposed be committed to trunk? It should work for all cards, since it only makes two elements of the TokenInfo optional. Yes, but I'm not able to directly locate the relevant part in the ASN.1 description (for objId)

Re: [opensc-devel] IAS ECC

2011-01-22 Thread Martin Paljak
Hello, To be honest I can't follow the discussion in detail, nor do I want to add oil to the continued dialogue unless one of the following is true: - OpenSC shall now create data structures that are not PKCS#15 conforming (requires a consensus on interpretation), or break some other

Re: [opensc-devel] Building cardmod Mindriver using Build environment

2011-01-22 Thread Martin Paljak
On Jan 14, 2011, at 9:07 PM, Douglas E. Engert wrote: 'On 1/14/2011 12:48 PM, Alon Bar-Lev wrote: At build script there is a comment: # Disable until we solve license issue # if [ -n ${BUILD_FOR_WINDOWS} ]; then # extra_opensc=${extra_opensc} --enable-cardmod # fi

Re: [opensc-devel] Proposed cardmod patch

2011-01-20 Thread Martin Paljak
Hello, On Jan 20, 2011, at 1:46 AM, Douglas E. Engert wrote: Attached is a patch to the cardmod code to do the following: (1) Fix an uninitialized stricture by by using calloc in stead of malloc. With out this it was having problems with checking the status on the reader.

Re: [opensc-devel] Proposed cardmod patch

2011-01-20 Thread Martin Paljak
Hello, On Jan 20, 2011, at 11:28 AM, francois.lebl...@cev-sa.com wrote: Douglas E. Engert deeng...@anl.gov a écrit sur 20/01/2011 00:46:51 : It's close to the first release I've develop see the start http://www.opensc-project.org/pipermail/opensc-devel/2009-October/012610.html but

Re: [opensc-devel] Building cardmod Mindriver using Build environment

2011-01-19 Thread Martin Paljak
On Jan 14, 2011, at 7:12 PM, Douglas E. Engert wrote: Is this the version of the cngsgk.msi to use? I see there may be a 1.3.0 version also available? 2.0 version should be used. Where on microsoft.com can you find the download page (which has release notes etc as well) for 1.3 version?

Re: [opensc-devel] Comments on the OpenSC cardmod mini-driver

2011-01-18 Thread Martin Paljak
Hello Douglas, On Jan 18, 2011, at 12:09 AM, Douglas E. Engert wrote: Using the registry for this does not look correct for a number of reasons: (1) there maybe multiple mini-drivers being run at the same time. (2) The location in the registry can only be written be the system,

Re: [opensc-devel] Review of HSM:s

2011-01-17 Thread Martin Paljak
Hello. On Jan 17, 2011, at 11:41 AM, Rickard Bellgrim wrote: We have written a review of four different HSM:s (AEP, Safenet, Thales, and Utimaco) with focus on creating signatures for DNSSEC with the PKCS#11 interface. Other topics was also addressed like the security model,

Re: [opensc-devel] [opensc-commits] svn opensc changed[5071] iso7816: Don' t translate a returned FCP template from SELECT FILE to unknown data received

2011-01-14 Thread Martin Paljak
On Jan 14, 2011, at 11:34 AM, Lionel Elie Mamane wrote: On Sun, Jan 09, 2011 at 10:17:09AM +, webmas...@opensc-project.org wrote: Log Message: --- iso7816: Don't translate a returned FCP template from SELECT FILE to unknown data received This log message looks like you

Re: [opensc-devel] Misleading information about capabilities of readers

2011-01-13 Thread Martin Paljak
Hello, On Jan 12, 2011, at 2:04 PM, Jean-Michel Pouré - GOOZE wrote: Le mercredi 12 janvier 2011 à 13:26 +0200, Martin Paljak a écrit : Per discussion, we have to pay to get the reader out of the unsupported list, and this is quite a large sum of money. Pay whom? How much? Please

Re: [opensc-devel] Misleading information about capabilities of readers

2011-01-13 Thread Martin Paljak
Hello, On Jan 13, 2011, at 7:08 PM, Peter Stuge wrote: Jean-Michel Pouré - GOOZE wrote: I've been under the impression (based on the header in should work list [1]) that it contains readers which work as expected and which Ludovic has. The names should be then: * Unsupported. * Supported

Re: [opensc-devel] Misleading information about capabilities of readers

2011-01-13 Thread Martin Paljak
On Jan 13, 2011, at 7:08 PM, Peter Stuge wrote: Jean-Michel Pouré - GOOZE wrote: I've been under the impression (based on the header in should work list [1]) that it contains readers which work as expected and which Ludovic has. The names should be then: * Unsupported. * Supported (and

Re: [opensc-devel] Misleading information about capabilities of readers

2011-01-12 Thread Martin Paljak
Hello, On Jan 12, 2011, at 11:34 AM, Aventra development wrote: Readers we have tested are: - ACS ACR38 CCID This is a very broad range, ACS re-uses the chip in different incarnations in several products that are marketed under different names and I would not bet on it being 100% the same chip

Re: [opensc-devel] Misleading information about capabilities of readers

2011-01-12 Thread Martin Paljak
Hello, On Jan 12, 2011, at 11:22 AM, Ludovic Rousseau wrote: Every _non-bogus_ reader. For example the Feitian SCR301 [2] is bogus and can't support CASE 2 APDU with Le=0 (256 bytes). That is why this reader is listed in the unsupported list of my CCID driver. Interesting. Too bad the

Re: [opensc-devel] Cryptoflex unsupprted?

2011-01-12 Thread Martin Paljak
Hello, On Jan 12, 2011, at 11:53 AM, François Schauber wrote: Hi, I just discovered OpenSC. I try to read my card, a Cryptoflex, but it seems unsupported. D:\Program Files\OpenSC Project\OpenSCopensc-tool.exe --reader 0 -a 3b:95:18:40:14:64:02:01:01:02 This seems like an unknown card

Re: [opensc-devel] Misleading information about capabilities of readers

2011-01-12 Thread Martin Paljak
On Jan 12, 2011, at 1:22 PM, Jean-Michel Pouré - GOOZE wrote: Le mercredi 12 janvier 2011 à 12:07 +0200, Martin Paljak a écrit : Jean-Michel, what were the symptoms of the bug? As for R-301-v1, it used to have an unsupported message, but it proved to be an OpenCT incompatibility. So

<    1   2   3   4   5   6   7   8   9   >