Re: [opensc-devel] pkcs15-tool --list-public-keys

2011-04-26 Thread Jean-Michel Pouré - GOOZE
Le lundi 25 avril 2011 à 22:53 +0200, NdK a écrit : pkcs15-tool -D should list 'em all, or not? A dump, oh sure, in hexadecimal or better binary. :) On the same vein: --list-public-keys does not read public keys derived from RSA private keys. --read-public-key arg reads public keys derived

Re: [opensc-devel] pkcs15-tool --list-public-keys

2011-04-26 Thread Jean-Michel Pouré - GOOZE
Le mardi 26 avril 2011 à 08:23 +0300, Martin Paljak a écrit : pkcs15-tool is a (G)UI as well. And to my knowledge it does what it advertises. After a short discussion with Martin, I post the steps to reproduce: Initialize the Feitian PKI: * pkcs15-init -E * pkcs15-init --create-pkcs15

Re: [opensc-devel] pkcs15-tool --list-public-keys

2011-04-26 Thread Martin Paljak
For example: What should happen when trying to delete such (nont existing) public key object? On Tue, Apr 26, 2011 at 16:38, Martin Paljak mar...@martinpaljak.net wrote: Hello, 2011/4/26 Jean-Michel Pouré - GOOZE jmpo...@gooze.eu: Le mardi 26 avril 2011 à 08:23 +0300, Martin Paljak a écrit :

Re: [opensc-devel] pkcs15-tool --list-public-keys

2011-04-26 Thread Jean-Michel Pouré - GOOZE
Le mardi 26 avril 2011 à 16:38 +0300, Martin Paljak a écrit : For the sake of purity, I don^t think that --list-public-keys should display a fake public key object, which does NOT exist on the card in relevant PKCS#15 structures. but patches for documentation are most welcome. I understand

Re: [opensc-devel] pkcs15-tool --list-public-keys

2011-04-26 Thread Peter Stuge
Jean-Michel Pouré - GOOZE wrote: For the sake of purity, I don^t think that --list-public-keys should display a fake public key object, which does NOT exist on the card in relevant PKCS#15 structures. but patches for documentation are most welcome. I understand your point of view.

Re: [opensc-devel] pkcs15-tool --list-public-keys

2011-04-26 Thread Douglas E. Engert
On 4/26/2011 2:25 AM, Jean-Michel Pouré - GOOZE wrote: Le lundi 25 avril 2011 à 22:53 +0200, NdK a écrit : pkcs15-tool -D should list 'em all, or not? A dump, oh sure, in hexadecimal or better binary. :) On the same vein: --list-public-keys does not read public keys derived from RSA

Re: [opensc-devel] pkcs15-tool --list-public-keys

2011-04-26 Thread Douglas E. Engert
On 4/26/2011 8:10 AM, Jean-Michel Pouré - GOOZE wrote: Le mardi 26 avril 2011 à 08:23 +0300, Martin Paljak a écrit : pkcs15-tool is a (G)UI as well. And to my knowledge it does what it advertises. After a short discussion with Martin, I post the steps to reproduce: Initialize the Feitian

[opensc-devel] pkcs15-tool --list-public-keys

2011-04-25 Thread Jean-Michel Pouré - GOOZE
Dear friends, pkcs15-tool --list-public-keys seems to return the list of available public keys being registered on card as public keys. It does not include the list of private keys. But some public keys can be derived from private keys and thus are not listed. Are there plans to modify

Re: [opensc-devel] pkcs15-tool --list-public-keys

2011-04-25 Thread Douglas E. Engert
On 4/25/2011 12:40 PM, Jean-Michel Pouré - GOOZE wrote: Dear friends, pkcs15-tool --list-public-keys seems to return the list of available public keys being registered on card as public keys. It does not include the list of private keys. But some public keys can be derived from private

Re: [opensc-devel] pkcs15-tool --list-public-keys

2011-04-25 Thread Peter Stuge
Jean-Michel Pouré - GOOZE wrote: It took me some time to understand that pkcs15-tool --list-public-keys did not return all public keys. So I expect users to be lost. We need one simple command returning precise information. Yes and no. It's not bad to have low-level tools which are useless

Re: [opensc-devel] pkcs15-tool --list-public-keys

2011-04-25 Thread Mr Dash Four
Yes and no. It's not bad to have low-level tools which are useless for end users. Those tools are very useful for developers. [...] Agree that end-user GUIs need more sophisticated functionality than may be offered by most or even all existing OpenSC tools. But that does not mean that

Re: [opensc-devel] pkcs15-tool --list-public-keys

2011-04-25 Thread Martin Paljak
Hello, 2011/4/25 Jean-Michel Pouré - GOOZE jmpo...@gooze.eu: pkcs15-tool --list-public-keys seems to return the list of available public keys being registered on card as public keys. It does not include the list of private keys. But some public keys can be derived from private keys and thus

Re: [opensc-devel] pkcs15-tool --list-public-keys

2011-04-25 Thread Martin Paljak
2011/4/25 Jean-Michel Pouré - GOOZE jmpo...@gooze.eu: Le lundi 25 avril 2011 à 13:51 -0500, Douglas E. Engert a écrit : But part of the derivation process may include additional parameters. Thus the derivation may may not have been done when pkcs15-tool is run or the key is only good why the