Re: [opensc-devel] GemSafe driver

2007-11-15 Thread Douglas E. Engert
Mattes, David wrote: >> -Original Message- >> From: Douglas E. Engert [mailto:[EMAIL PROTECTED] >> Sent: Thursday, November 15, 2007 9:51 AM >> To: Mattes, David >> Cc: Ludovic Rousseau; opensc-devel@lists.opensc-project.org >> Subjec

Re: [opensc-devel] GemSafe driver

2007-11-15 Thread Mattes, David
> -Original Message- > From: Douglas E. Engert [mailto:[EMAIL PROTECTED] > Sent: Thursday, November 15, 2007 9:51 AM > To: Mattes, David > Cc: Ludovic Rousseau; opensc-devel@lists.opensc-project.org > Subject: Re: [opensc-devel] GemSafe driver > > > > Matte

Re: [opensc-devel] GemSafe driver

2007-11-15 Thread Mattes, David
> -Original Message- > From: Douglas E. Engert [mailto:[EMAIL PROTECTED] > Sent: Thursday, November 15, 2007 8:27 AM > To: Mattes, David > Cc: Ludovic Rousseau; opensc-devel@lists.opensc-project.org > Subject: Re: [opensc-devel] GemSafe driver > >

Re: [opensc-devel] GemSafe driver

2007-11-15 Thread Douglas E. Engert
Mattes, David wrote: >>> I can read the cert off the card. I have tried pkcs15-crypt with an > md5 >>> hash in binary file (16 bytes): >>> pkcs15-crypt -s -k 45 -i foo.md5 >>> returns: >>> Input has to be exactly 128 bytes, when using no padding. >> Was it working with your own version of OpenS

Re: [opensc-devel] GemSafe driver

2007-11-15 Thread Mattes, David
> -Original Message- > From: Ludovic Rousseau [mailto:[EMAIL PROTECTED] > Sent: Thursday, November 15, 2007 6:01 AM > To: Mattes, David > Cc: opensc-devel@lists.opensc-project.org > Subject: Re: [opensc-devel] GemSafe driver > > 2007/11/13, Mattes,

Re: [opensc-devel] GemSafe driver

2007-11-15 Thread Mattes, David
> -Original Message- > From: Ludovic Rousseau [mailto:[EMAIL PROTECTED] > Sent: Thursday, November 15, 2007 6:10 AM > To: opensc-devel@lists.opensc-project.org > Cc: Mattes, David > Subject: Re: [opensc-devel] GemSafe driver > > 2007/11/13, Douglas E.

Re: [opensc-devel] GemSafe driver

2007-11-15 Thread Douglas E. Engert
Mattes, David wrote: >> -Original Message- >> From: Ludovic Rousseau [mailto:[EMAIL PROTECTED] >> Sent: Thursday, November 15, 2007 6:10 AM >> To: opensc-devel@lists.opensc-project.org >> Cc: Mattes, David >> Subject: Re: [opensc-devel] GemSafe driver

Re: [opensc-devel] GemSafe driver

2007-11-15 Thread Ludovic Rousseau
2007/11/15, Douglas E. Engert <[EMAIL PROTECTED]>: > > > Ludovic Rousseau wrote: > > 2007/11/13, Douglas E. Engert <[EMAIL PROTECTED]>: > >> Got the card to work with MIT Kerberos to PKINIT to PKCS#11 > >> with Windows AD acting as KDC. > >> > >> In addition to the thew changes committed by Ludovic

Re: [opensc-devel] GemSafe driver

2007-11-15 Thread Douglas E. Engert
Ludovic Rousseau wrote: > 2007/11/13, Douglas E. Engert <[EMAIL PROTECTED]>: >> Got the card to work with MIT Kerberos to PKINIT to PKCS#11 >> with Windows AD acting as KDC. >> >> In addition to the thew changes committed by Ludovic yesterday, >> I had to make the attached changes. >> >> flags

Re: [opensc-devel] GemSafe driver

2007-11-15 Thread Ludovic Rousseau
2007/11/13, Mattes, David <[EMAIL PROTECTED]>: > > -Original Message- > > From: Ludovic Rousseau [mailto:[EMAIL PROTECTED] > > Sent: Monday, November 12, 2007 2:37 AM > > To: Mattes, David > > Cc: opensc-devel@lists.opensc-project.org > >

Re: [opensc-devel] GemSafe driver

2007-11-15 Thread Ludovic Rousseau
2007/11/13, Douglas E. Engert <[EMAIL PROTECTED]>: > Got the card to work with MIT Kerberos to PKINIT to PKCS#11 > with Windows AD acting as KDC. > > In addition to the thew changes committed by Ludovic yesterday, > I had to make the attached changes. > > flags |= SC_ALGORITHM_RSA_HASH_NONE; > >

Re: [opensc-devel] GemSafe driver

2007-11-13 Thread Douglas E. Engert
Mattes, David wrote: >> -Original Message- >> From: Mattes, David >> Sent: Tuesday, November 13, 2007 11:16 AM >> To: 'Ludovic Rousseau'; opensc-devel@lists.opensc-project.org >> Subject: RE: [opensc-devel] GemSafe driver >> >>>

Re: [opensc-devel] GemSafe driver

2007-11-13 Thread Douglas E. Engert
PROTECTED] Sent: Monday, November 12, 2007 2:37 AM To: Mattes, David Cc: opensc-devel@lists.opensc-project.org Subject: Re: [opensc-devel] GemSafe driver David, can you test your cards with the SVN version of OpenSC and report if it works for you? Maybe the code need more changes to work with OpenSC

Re: [opensc-devel] GemSafe driver

2007-11-13 Thread Mattes, David
> -Original Message- > From: Ludovic Rousseau [mailto:[EMAIL PROTECTED] > Sent: Monday, November 12, 2007 11:49 PM > To: opensc-devel@lists.opensc-project.org > Subject: Re: [opensc-devel] GemSafe driver > > 2007/11/12, Douglas E. Engert <[EMAIL PROTECTED]>: >

Re: [opensc-devel] GemSafe driver

2007-11-13 Thread Mattes, David
> -Original Message- > From: Mattes, David > Sent: Tuesday, November 13, 2007 11:16 AM > To: 'Ludovic Rousseau'; opensc-devel@lists.opensc-project.org > Subject: RE: [opensc-devel] GemSafe driver > > > -Original Message- > > From: L

Re: [opensc-devel] GemSafe driver

2007-11-13 Thread Mattes, David
> -Original Message- > From: Ludovic Rousseau [mailto:[EMAIL PROTECTED] > Sent: Monday, November 12, 2007 2:37 AM > To: Mattes, David > Cc: opensc-devel@lists.opensc-project.org > Subject: Re: [opensc-devel] GemSafe driver > David, can you test your cards with the

Re: [opensc-devel] GemSafe driver

2007-11-13 Thread Mattes, David
> -Original Message- > From: Ludovic Rousseau [mailto:[EMAIL PROTECTED] > Sent: Tuesday, November 13, 2007 1:16 AM > To: opensc-devel@lists.opensc-project.org > Cc: Mattes, David > Subject: Re: [opensc-devel] GemSafe driver > > 2007/11/12, Douglas E. Engert <[EM

Re: [opensc-devel] GemSafe driver

2007-11-13 Thread Ludovic Rousseau
2007/11/12, Douglas E. Engert <[EMAIL PROTECTED]>: > Also attached are changes I had to make to get this far: > > Remove the _sc_card_add_rsa_alg( card, 1024, SC_ALGORITHM_RSA_PAD_PKCS1, > 0); > as this was already being done in the card-gemsafeV1.c Commited in revision 3299 > Can the

Re: [opensc-devel] GemSafe driver

2007-11-12 Thread Ludovic Rousseau
2007/11/12, Douglas E. Engert <[EMAIL PROTECTED]>: > In answer to my own e-mail about leng of PIN, it looks like the > following change is needed > > --- pkcs15-gemsafeV1.c (revision 3296) > +++ pkcs15-gemsafeV1.c (working copy) > @@ -420,8 +420,8 @@ > > if (path) > info

Re: [opensc-devel] GemSafe driver

2007-11-12 Thread Ludovic Rousseau
2007/11/12, Douglas E. Engert <[EMAIL PROTECTED]>: > The ATR above is listed in as one of the gemexpresso_atrs[]. It looks > like you added it to the SVC, as it was not in Dave's original source. I added this ATR. It correspond to the card I have. > All the other card routines use sc_pkcs15emu

Re: [opensc-devel] GemSafe driver

2007-11-12 Thread Douglas E. Engert
David, I have gotten further with the code Ludovic committed to the SVN yesterday using the Gemplus GemXpresso Pro R3 E32 PK card. This is not the card you have but an older version. I can read the cert, use the pin, set the security environment. What I am trying to do is use it with MIT Kerbe

Re: [opensc-devel] GemSafe driver

2007-11-12 Thread Douglas E. Engert
In answer to my own e-mail about leng of PIN, it looks like the following change is needed --- pkcs15-gemsafeV1.c (revision 3296) +++ pkcs15-gemsafeV1.c (working copy) @@ -420,8 +420,8 @@ if (path) info->path = *path; - if (type == SC_PKCS15_PIN_TYPE_BCD) -

Re: [opensc-devel] GemSafe driver

2007-11-12 Thread Douglas E. Engert
Ludovic Rousseau wrote: > 2007/11/9, Douglas E. Engert <[EMAIL PROTECTED]>: >> We also have some newer GemSAFE card used with Windows, with >> ATR: 3b:7a:94:00:00:80:65:a2:01:01:01:3d:72:d6:43 >> Gemplus GemXpresso Pro R3 E32 PK (I believe), but we never wrote the driver >> for these Would you

Re: [opensc-devel] GemSafe driver

2007-11-12 Thread Ludovic Rousseau
2007/11/12, Ludovic Rousseau <[EMAIL PROTECTED]>: > 2007/11/9, Mattes, David <[EMAIL PROTECTED]>: > > I wrote the driver back when opensc-0.9.6 was the latest release and I > > have not kept up with porting it. One reason is that the Linux distro > > I'm using (SuSE Linux Desktop 10 SP1) still shi

Re: [opensc-devel] GemSafe driver

2007-11-12 Thread Ludovic Rousseau
2007/11/9, Douglas E. Engert <[EMAIL PROTECTED]>: > We also have some newer GemSAFE card used with Windows, with > ATR: 3b:7a:94:00:00:80:65:a2:01:01:01:3d:72:d6:43 > Gemplus GemXpresso Pro R3 E32 PK (I believe), but we never wrote the driver > for these Would you expect that your driver could wo

Re: [opensc-devel] GemSafe driver

2007-11-12 Thread Ludovic Rousseau
2007/11/9, Mattes, David <[EMAIL PROTECTED]>: > Finally! I have obtained permission from my employer and Gemalto to > release as open source the GemSafe OpenSC drivers I have written - > though with excellent "in the dark" support from Nils Larsch (thank you, > Nils). The driver is for the GemSaf

Re: [opensc-devel] GemSafe driver

2007-11-09 Thread Douglas E. Engert
Mattes, David wrote: > Finally! I have obtained permission from my employer and Gemalto to > release as open source the GemSafe OpenSC drivers I have written - > though with excellent "in the dark" support from Nils Larsch (thank you, > Nils). The driver is for the GemSafe applet on the GemXPre

[opensc-devel] GemSafe driver

2007-11-09 Thread Mattes, David
Finally! I have obtained permission from my employer and Gemalto to release as open source the GemSafe OpenSC drivers I have written - though with excellent "in the dark" support from Nils Larsch (thank you, Nils). The driver is for the GemSafe applet on the GemXPresso64k card. Several hundred pe