OpenSC wrote:
#197: Entersafe driver: impossible to transfer 2048bit key to PKI card
---------------------+------------------------------------------------------
Reporter: jmpoure | Owner: opensc-de...@…
Type: defect | Status: new
Priority: normal | Milestone:
Component: opensc | Version: 0.11.6
Severity: normal | Keywords:
---------------------+------------------------------------------------------
I am following these guidelines with FEITIAN PKI:
http://wiki.strongswan.org/projects/strongswan/wiki/SmartCards
{{{
pkcs15-init --erase-card
pkcs15-init --create-pkcs15 --profile pkcs15+onepin \
--use-default-transport-key \
--pin 0000 --puk 111111 \
--label "Test"
}}}
Is okay.
Then
{{{
pkcs15-init --auth-id 1 --store-private-key myKey.pem
}}}
fails with incorrect parameter.
The RSA is a 2048bit private key in PEM format.
It could be a problem with entersafe driver.
I don't know how it worked before,
but now it works for me with the following diff:
--- src/libopensc/card-entersafe.c (révision 4040)
+++ src/libopensc/card-entersafe.c (copie de travail)
@@ -1252,7 +1252,7 @@
switch(data->usage)
{
case 0x22:
- if(rsa->modulus.len<=1024)
+ if(rsa->modulus.len < 256)
return
entersafe_write_small_rsa_key(card,data->key_id,rsa);
else
return
entersafe_write_large_rsa_key(card,data->key_id,rsa);
Kind wishes,
Viktor.
--
Viktor Tarasov <viktor.tara...@opentrust.com>
_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel
