Re: [opensc-devel] Signing with openssl and an iasecc card

2011-12-06 Thread Jean-Pierre Fortune
Viktor, I would like to thank you very much. The link to secure-messaging Git repos and your further explanations solved all my problems. I had to learn this pkcs11/iasecc in a short time but now I am able to sign files with openssl / smime / engine_pkcs11 /opensc / iasecc card! The produced sig

Re: [opensc-devel] Signing with openssl and an iasecc card

2011-12-06 Thread Viktor Tarasov
Le 05/12/2011 14:37, Viktor Tarasov a écrit : > Hello Jean-Pierre, > > Le 05/12/2011 11:27, Jean-Pierre Fortune a écrit : >> Could this behaviour be related to the fact that the private key is >> not allowed to sign? >> Where could I patch the code to force the use of this key? > > afais, you a usi

Re: [opensc-devel] Signing with openssl and an iasecc card

2011-12-05 Thread Viktor Tarasov
Hello Jean-Pierre, Le 05/12/2011 11:27, Jean-Pierre Fortune a écrit : > Could this behaviour be related to the fact that the private key is > not allowed to sign? > Where could I patch the code to force the use of this key? afais, you a using key in 'Generic PKI' application. For all pre-allocate

Re: [opensc-devel] Signing with openssl and an iasecc card

2011-12-05 Thread Jean-Pierre Fortune
Hello Viktor, I have retrieved your last code from the git repository. According to the log file, the application / card pin slot is now done correctly: [...] 0xb78a28d0 10:29:40.089 [opensc-pkcs11] framework-pkcs15.c:678:pkcs15_create_pkcs11_objects: Found 3 data objects 0xb78a28d0 10:29:40.089

Re: [opensc-devel] Signing with openssl and an iasecc card

2011-12-04 Thread Viktor Tarasov
Hello Jean-Pierre, I guess that you are using the version of OpenSC where the implementation of IAS/ECC support was not completely finished. The multi-application aspects of IAS/ECC card where implemented in PKCS#11 only recently and are not yet ported into the main branch. You can try the gith

Re: [opensc-devel] Signing with openssl and an iasecc card

2011-12-04 Thread Jean-Pierre Fortune
Hi Douglas, Effectively, there is no way to set a specific aid in pkcs11/engine_pkcs11/openssl chain. The "default" app is always chosen. My card's personalisation has to be reviewed. I will use the pkcs11/15 lib "directly" in the mean time. Thanks for the help. Best regards, -- Jean-Pierre 2011/

Re: [opensc-devel] Signing with openssl and an iasecc card

2011-12-02 Thread Douglas E. Engert
On 12/2/2011 3:56 AM, Jean-Pierre Fortune wrote: > Thank you. But I still have the problem. > > 2011/12/1 Douglas E. Engert: >> >> >> On 12/1/2011 8:04 AM, Jean-Pierre Fortune wrote: >>> Hello, >>> >>> I am currently trying to sign a file with an iasecc compliant >>> smartcard and openssl but I c

Re: [opensc-devel] Signing with openssl and an iasecc card

2011-12-02 Thread Jean-Pierre Fortune
Thank you. But I still have the problem. 2011/12/1 Douglas E. Engert : > > > On 12/1/2011 8:04 AM, Jean-Pierre Fortune wrote: >> Hello, >> >> I am currently trying to sign a file with an iasecc compliant >> smartcard and openssl but I can find out how to specify the private >> key to use. >> >> Th

Re: [opensc-devel] Signing with openssl and an iasecc card

2011-12-01 Thread Douglas E. Engert
On 12/1/2011 8:04 AM, Jean-Pierre Fortune wrote: > Hello, > > I am currently trying to sign a file with an iasecc compliant > smartcard and openssl but I can find out how to specify the private > key to use. > > The private key I want to select "belongs" to the ECC Generic ID application. > > Whe

[opensc-devel] Signing with openssl and an iasecc card

2011-12-01 Thread Jean-Pierre Fortune
Hello, I am currently trying to sign a file with an iasecc compliant smartcard and openssl but I can find out how to specify the private key to use. The private key I want to select "belongs" to the ECC Generic ID application. When signing with pkcs15-crypt tool, I execute the following command