Re: [opensc-devel] Mac Tokend PIN Rejection

2009-06-10 Thread Henry B. Hotz
On Mar 22, 2009, at 11:36 AM, Henry B. Hotz wrote: On Mar 21, 2009, at 2:26 AM, Martin Paljak wrote: On 21.03.2009, at 2:34, Henry B. Hotz wrote: I'm willing to do some debugging, if someone will tell me what to look at. Maybe where to put syslog calls in a custom build? You can run

[opensc-devel] Mac Tokend PIN Rejection

2009-06-10 Thread Thomas fake Jakobi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 hi, i'm not too sure wether mailman will be able to attach this message to the thread i am referring to, so i'll add a link to it: http://www.opensc-project.org/pipermail/opensc-devel/2009-April/012052.html i just wanted to add a thumbs up for

Re: [opensc-devel] Mac Tokend PIN Rejection

2009-04-18 Thread João Poupino
Hello Hugh, I have attached a patch to add support for different size keys in the tokend, which should work for RSA 2048-bit keys. I removed the hardcoded 1024 values and added an attribute coder for key attributes, which examines the key object to determine the key size. I've tested

Re: [opensc-devel] Mac Tokend PIN Rejection

2009-04-13 Thread Hugh Cole-Baker
On Apr 13, 2009, at 1:50 AM, Martin Paljak wrote: On 13.04.2009, at 2:27, Hugh Cole-Baker wrote: I had the same error, but got around it by choosing the Deployment (instead of Development) build config. in XCode. I think the build process may not be building the debug version of

Re: [opensc-devel] Mac Tokend PIN Rejection

2009-04-12 Thread Hugh Cole-Baker
Henry B. Hotz wrote: On Mar 24, 2009, at 12:49 PM, Martin Paljak wrote: On 24.03.2009, at 21:42, Henry B. Hotz wrote: If you give me a hint, I'll try building under Leopard and look at the source. The WIKI (down last night) only describes building under Tiger. I have darwinbuild

Re: [opensc-devel] Mac Tokend PIN Rejection

2009-04-12 Thread Martin Paljak
On 13.04.2009, at 2:27, Hugh Cole-Baker wrote: I had the same error, but got around it by choosing the Deployment (instead of Development) build config. in XCode. I think the build process may not be building the debug version of tokend.framework correctly. That's right. Anyway, I have

Re: [opensc-devel] Mac Tokend PIN Rejection

2009-03-25 Thread Thomas Engelmeier
Am Mar 24, 2009 um 8:09 PM schrieb Henry B. Hotz: On Mar 24, 2009, at 6:27 AM, Miller, Timothy J. wrote: FYI, Apple's SmartCardServices stuff is now out on MacForge: http://smartcardservices.macosforge.org/ Not sure if this includes tokend code, but there you go. -- Tim It does. It

Re: [opensc-devel] Mac Tokend PIN Rejection

2009-03-25 Thread Henry B. Hotz
On Mar 25, 2009, at 1:54 AM, Thomas Engelmeier wrote: Am Mar 24, 2009 um 8:09 PM schrieb Henry B. Hotz: On Mar 24, 2009, at 6:27 AM, Miller, Timothy J. wrote: FYI, Apple's SmartCardServices stuff is now out on MacForge: http://smartcardservices.macosforge.org/ Not sure if this includes

Re: [opensc-devel] Mac Tokend PIN Rejection

2009-03-25 Thread Henry B. Hotz
On Mar 24, 2009, at 12:49 PM, Martin Paljak wrote: On 24.03.2009, at 21:42, Henry B. Hotz wrote: If you give me a hint, I'll try building under Leopard and look at the source. The WIKI (down last night) only describes building under Tiger. I have darwinbuild and friends installed.

Re: [opensc-devel] Mac Tokend PIN Rejection

2009-03-24 Thread Miller, Timothy J.
-project.org] On Behalf Of Henry B. Hotz Sent: Sunday, March 22, 2009 1:37 PM To: Martin Paljak Cc: opensc-de...@opensc-project.org Subject: Re: [opensc-devel] Mac Tokend PIN Rejection On Mar 21, 2009, at 2:26 AM, Martin Paljak wrote: On 21.03.2009, at 2:34, Henry B. Hotz wrote: If it is a PIV card

Re: [opensc-devel] Mac Tokend PIN Rejection

2009-03-24 Thread Henry B. Hotz
On Mar 24, 2009, at 6:27 AM, Miller, Timothy J. wrote: FYI, Apple's SmartCardServices stuff is now out on MacForge: http://smartcardservices.macosforge.org/ Not sure if this includes tokend code, but there you go. -- Tim It does. It doesn't build because it depends on 2-3 CDSA

Re: [opensc-devel] Mac Tokend PIN Rejection

2009-03-24 Thread Henry B. Hotz
On Mar 24, 2009, at 8:25 AM, Martin Paljak wrote: 1. According to the log and my testing, the cosmetic show locked icon code is never called on 10.5.6. The lock icon has no practical meaning (except for authenticating the first PIN once when clicked). So it remains locked for now. I can

Re: [opensc-devel] Mac Tokend PIN Rejection

2009-03-24 Thread Martin Paljak
On 24.03.2009, at 21:42, Henry B. Hotz wrote: If you give me a hint, I'll try building under Leopard and look at the source. The WIKI (down last night) only describes building under Tiger. I have darwinbuild and friends installed. Don't bother with darwinbuild for now.

Re: [opensc-devel] Mac Tokend PIN Rejection

2009-03-24 Thread Miller, Timothy J.
The hash value, BTW, is just the subject key identifier extension field in the cert. It's computed by the CA, you don't compute it yourself. (Only guaranteed to be unique for a single CA.) sc_auth is just a script layered on top of dscl and security if you feel like looking at such things. The

Re: [opensc-devel] Mac Tokend PIN Rejection

2009-03-22 Thread Henry B. Hotz
On Mar 21, 2009, at 2:26 AM, Martin Paljak wrote: On 21.03.2009, at 2:34, Henry B. Hotz wrote: If it is a PIV card, you probably don't use OpenSC tokend, but the CAC one? I might be wrong. Anyway, you don't need to unlock the keychain, you need to provide the PIN when you use a

Re: [opensc-devel] Mac Tokend PIN Rejection

2009-03-22 Thread Henry B. Hotz
On Mar 22, 2009, at 11:36 AM, Henry B. Hotz wrote: On Mar 21, 2009, at 2:26 AM, Martin Paljak wrote: On 21.03.2009, at 2:34, Henry B. Hotz wrote: I'm willing to do some debugging, if someone will tell me what to look at. Maybe where to put syslog calls in a custom build? You can run

Re: [opensc-devel] Mac Tokend PIN Rejection

2009-03-21 Thread Martin Paljak
On 21.03.2009, at 2:34, Henry B. Hotz wrote: If it is a PIV card, you probably don't use OpenSC tokend, but the CAC one? I might be wrong. Anyway, you don't need to unlock the keychain, you need to provide the PIN when you use a key/certificate on the card. CAC uses the CAC Tokend. PIV

[opensc-devel] Mac Tokend PIN Rejection

2009-03-20 Thread Henry B. Hotz
I don't think I'm having any trouble with the PIN in normal OpenSC operations, but I can't unlock the card in Apple's Keychain Access app. NASA PIV card, SCM 331 reader, Leopard. Any pointers? How would I debug this? -- The opinions

Re: [opensc-devel] Mac Tokend PIN Rejection

2009-03-20 Thread Martin Paljak
On 20.03.2009, at 7:36, Henry B. Hotz wrote: I don't think I'm having any trouble with the PIN in normal OpenSC operations, but I can't unlock the card in Apple's Keychain Access app. NASA PIV card, SCM 331 reader, Leopard. Any pointers? How would I debug this? AFAIK the lock in

Re: [opensc-devel] Mac Tokend PIN Rejection

2009-03-20 Thread Henry B. Hotz
On Mar 20, 2009, at 3:47 AM, Martin Paljak wrote: On 20.03.2009, at 7:36, Henry B. Hotz wrote: I don't think I'm having any trouble with the PIN in normal OpenSC operations, but I can't unlock the card in Apple's Keychain Access app. NASA PIV card, SCM 331 reader, Leopard. Any pointers?