Re: [opensc-devel] Do smart card drivers generally support more than one PKCS#11 session?

2011-06-22 Thread Stef Walter
On 06/22/2011 12:22 PM, Nikos Mavrogiannopoulos wrote: > On 06/21/2011 07:59 PM, Stef Walter wrote: > >>> I didn't like the pinfile attribute of pkcs11-urls much, because >>> its semantics are undefined. I see it as an option that could cause >>> compatibility issues between libraries using URLs.

Re: [opensc-devel] Do smart card drivers generally support more than one PKCS#11 session?

2011-06-22 Thread Nikos Mavrogiannopoulos
On 06/21/2011 07:59 PM, Stef Walter wrote: >> I didn't like the pinfile attribute of pkcs11-urls much, because >> its semantics are undefined. I see it as an option that could cause >> compatibility issues between libraries using URLs. That's why I >> have ignored it so far. > > Yes, I understan

Re: [opensc-devel] Do smart card drivers generally support more than one PKCS#11 session?

2011-06-21 Thread Stef Walter
Sorry for taking so long to answer, was away for a week... On 06/15/2011 11:28 PM, Nikos Mavrogiannopoulos wrote: > On 06/13/2011 11:11 AM, Stef Walter wrote: >> Since the PKCS#11 URI's say that the pinfile attribute of the URI >> can be determined by the application, we can build something simple

Re: [opensc-devel] Do smart card drivers generally support more than one PKCS#11 session?

2011-06-16 Thread Douglas E. Engert
On 6/15/2011 4:28 PM, Nikos Mavrogiannopoulos wrote: > On 06/13/2011 11:11 AM, Stef Walter wrote: >> On 06/10/2011 07:08 PM, Martin Paljak wrote: >>> On Jun 10, 2011, at 13:11 , Stef Walter wrote: After sleeping on this idea, I realized it won't work in certain cases. In particular wh

Re: [opensc-devel] Do smart card drivers generally support more than one PKCS#11 session?

2011-06-15 Thread Nikos Mavrogiannopoulos
On 06/13/2011 11:11 AM, Stef Walter wrote: > On 06/10/2011 07:08 PM, Martin Paljak wrote: >> On Jun 10, 2011, at 13:11 , Stef Walter wrote: >>> After sleeping on this idea, I realized it won't work in certain >>> cases. In particular when the key has CKA_ALWAYS_AUTHENTICATE >>> and requires C_Logi

Re: [opensc-devel] Do smart card drivers generally support more than one PKCS#11 session?

2011-06-13 Thread Stef Walter
On 06/10/2011 07:08 PM, Martin Paljak wrote: > On Jun 10, 2011, at 13:11 , Stef Walter wrote: >> After sleeping on this idea, I realized it won't work in certain >> cases. In particular when the key has CKA_ALWAYS_AUTHENTICATE and >> requires C_Login with CKU_CONTEXT_SPECIFIC. > This is hardly the

Re: [opensc-devel] Do smart card drivers generally support more than one PKCS#11 session?

2011-06-10 Thread Douglas E. Engert
On 6/10/2011 12:08 PM, Martin Paljak wrote: > > On Jun 10, 2011, at 13:11 , Stef Walter wrote: > >> On 06/09/2011 09:37 PM, Stef Walter wrote: >>> I'm working on integrating smart card support via PKCS#11 into glib and >>> gcr (part of gnome-keyring). We're integrating with GnuTLS for TLS support

Re: [opensc-devel] Do smart card drivers generally support more than one PKCS#11 session?

2011-06-10 Thread Martin Paljak
On Jun 10, 2011, at 13:11 , Stef Walter wrote: > On 06/09/2011 09:37 PM, Stef Walter wrote: >> I'm working on integrating smart card support via PKCS#11 into glib and >> gcr (part of gnome-keyring). We're integrating with GnuTLS for TLS support. >> >> I'd like to be able to do a C_Login in my co

Re: [opensc-devel] Do smart card drivers generally support more than one PKCS#11 session?

2011-06-10 Thread Stef Walter
On 06/09/2011 09:37 PM, Stef Walter wrote: > I'm working on integrating smart card support via PKCS#11 into glib and > gcr (part of gnome-keyring). We're integrating with GnuTLS for TLS support. > > I'd like to be able to do a C_Login in my code, and then pass off the > URL to Gnutls. GnuTLS would

Re: [opensc-devel] Do smart card drivers generally support more than one PKCS#11 session?

2011-06-09 Thread Stef Walter
On 06/09/2011 10:11 PM, Alon Bar-Lev wrote: > Yes. > Most [usable] providers support this. Good to hear. > Although there are different issues to solve in your case, such as > calling twice to C_Initialize, not calling C_Finalize if C_Initialize > returned with already initialized. This is what

Re: [opensc-devel] Do smart card drivers generally support more than one PKCS#11 session?

2011-06-09 Thread Alon Bar-Lev
Yes. Most [usable] providers support this. Although there are different issues to solve in your case, such as calling twice to C_Initialize, not calling C_Finalize if C_Initialize returned with already initialized. Also, some implementations will treat authentication state same for all sessions,

[opensc-devel] Do smart card drivers generally support more than one PKCS#11 session?

2011-06-09 Thread Stef Walter
I'm working on integrating smart card support via PKCS#11 into glib and gcr (part of gnome-keyring). We're integrating with GnuTLS for TLS support. I'd like to be able to do a C_Login in my code, and then pass off the URL to Gnutls. GnuTLS would then open another session, recognize that we're a