[opensc-devel] Aladdin eToken Pro 64k (regression?) - insecure keys and 1 User PIN configurations don't seem to work

2012-12-11 Thread Mike Kazantsev
Hi, Summary: either I'm doing something wrong or with current (and more generally 0.12.0) OpenSC, Aladdin eToken Pro 64k devices seem to work only with a single User PIN and secure keys. I have a bunch of Aladdin eToken Pro 64k USB tokens and have been using one of them with OpenSC for a few

Re: [opensc-devel] Aladdin eToken PRO 64k

2007-06-16 Thread Vladislav Kurz
On Tue, 12 Jun 2007, Nils Larsch wrote: Vladislav Kurz wrote: ... Is there any test suite whose results might be interesting to developers? E.g. trunk/src/tests/regression/run-all ? ,/run-all --continue testd some important workflows and should work for cardos (otherwise please send a bug

Re: [opensc-devel] Aladdin eToken PRO 64k

2007-06-12 Thread Jan Just Keijser
Hi Peter, Jean-Pierre, thx for the suggestion but we already a bunch of Aladdin eTokens ... they are working for us, just not with open source software. If I can get them to work with 100% open source stuff then that would be great. regards, Jan Just Keijser System Integrator Nikhef /

Re: [opensc-devel] Aladdin eToken PRO 64k

2007-06-12 Thread Jan Just Keijser
Hi Eddy, see comments below Eddy Nigg (StartCom Ltd.) wrote: Jan Just Keijser wrote: Right now I've got it boiled down to - install a single RPM (for RHEL4, Fedora Core 5/6, OpenSuSE 10.x) or install one or two .deb packages on Debian or Ubuntu - follow instructions on how to add the

Re: [opensc-devel] Aladdin eToken PRO 64k

2007-06-11 Thread Jan Just Keijser
that's a very interesting patch ! I've been trying to get a similar eToken PRO (32K) to work and ended up using the Aladdin RTE software. My eToken PRO also lists '4.2B' but the problem lies/lied with the OS version OS Version: 200.9 (unknown Version) with your patch the 'opensc-tool' and

Re: [opensc-devel] Aladdin eToken PRO 64k

2007-06-11 Thread Eddy Nigg (StartCom Ltd.)
Hi Jan, Jan Just Keijser wrote: that's a very interesting patch ! I've been trying to get a similar eToken PRO (32K) to work and ended up using the Aladdin RTE software. My eToken PRO also lists '4.2B' but the problem lies/lied with the OS version OS Version: 200.9 (unknown Version)

Re: [opensc-devel] Aladdin eToken PRO 64k

2007-06-11 Thread Jan Just Keijser
Hi Eddy, hmmm I was hoping to get cross-platform cross-software pkcs11 support to work. However, pkcs15-init also fails on me, BTW: ./pkcs15-init -C -v -v -v [pkcs15-init] sc.c:196:sc_detect_card_presence: called [pkcs15-init] reader-openct.c:207:openct_reader_detect_card_presence: called

Re: [opensc-devel] Aladdin eToken PRO 64k

2007-06-11 Thread Eddy Nigg (StartCom Ltd.)
Mmhhh... didn't you say previously that you were using an eToken Pro 32K? It recognizes it as 64K??? Guess there must be something wrong in that case... Can you confirm the token type and version? Jan Just Keijser wrote: Hi Eddy, hmmm I was hoping to get cross-platform cross-software pkcs11

Re: [opensc-devel] Aladdin eToken PRO 64k

2007-06-11 Thread Jan Just Keijser
yes it's an eToken PRO 32K ; I've always seen this thing reported by OpenSC as a 64k card but I figured this was due to bad support for these cards. ./cardos-info -v -v -v Connecting to card in reader Aladdin eToken PRO 64k... Using card driver Siemens CardOS. Info : CardOS V4.2B (C) Siemens

Re: [opensc-devel] Aladdin eToken PRO 64k

2007-06-11 Thread Eddy Nigg (StartCom Ltd.)
Jan Just Keijser wrote: yes it's an eToken PRO 32K ; I've always seen this thing reported by OpenSC as a 64k card but I figured this was due to bad support for these cards. Nope...that's simply wrong. Another call for Nils ;-) Guess we'll need another debugging session here...

Re: [opensc-devel] Aladdin eToken PRO 64k

2007-06-11 Thread Douglas E. Engert
Eddy Nigg (StartCom Ltd.) wrote: Hi Jan, Jan Just Keijser wrote: that's a very interesting patch ! I've been trying to get a similar eToken PRO (32K) to work and ended up using the Aladdin RTE software. My eToken PRO also lists '4.2B' but the problem lies/lied with the OS version OS

Re: [opensc-devel] Aladdin eToken PRO 64k

2007-06-11 Thread Eddy Nigg (StartCom Ltd.)
Douglas E. Engert wrote: Sounds like a emulation routine could be writen. Has anyone looked at that? I would assume you would want to use the same certificates as used with Windows and the vendor's other software. One could maybe receive the relevant docs from Aladdin, but to all of my

Re: [opensc-devel] Aladdin eToken PRO 64k

2007-06-11 Thread Jan Just Keijser
the reason we started looking at eToken's was to make grid access *easier*, not harder ;-) (see http://www.nikhef.nl/pub/projects/grid/gridwiki/index.php/Using_an_Aladdin_eToken_PRO_to_store_grid_certificates for a writeup on how to use Aladdin's RTE software to access eToken's from Linux)

Re: [opensc-devel] Aladdin eToken PRO 64k

2007-06-11 Thread Douglas E. Engert
Eddy Nigg (StartCom Ltd.) wrote: Douglas E. Engert wrote: Sounds like a emulation routine could be writen. Has anyone looked at that? I would assume you would want to use the same certificates as used with Windows and the vendor's other software. One could maybe receive the relevant docs

Re: [opensc-devel] Aladdin eToken PRO 64k

2007-06-11 Thread Douglas E. Engert
So in your case, would you be willing to convert to using an all OpenSC solution, dropping the use the the Aladdin's RTE software? But what is the (commercial) GUI on Windows. What does it do for you user's that OpenSC on Windows can not do? Is this a missing CSP? Jan Just Keijser wrote: the

Re: [opensc-devel] Aladdin eToken PRO 64k

2007-06-11 Thread Jan Just Keijser
Cornelius Kölbel wrote: Hi, unfortunately I guess at the moment it will not make it easier for your users. The integration of smartcards is not seamless into any linux distribution yet. Even if all opensc software is installed and your token/smartcard is recognized, the user will still have

Re: [opensc-devel] Aladdin eToken PRO 64k

2007-06-11 Thread Nils Larsch
Jan Just Keijser wrote: Hi Eddy, hmmm I was hoping to get cross-platform cross-software pkcs11 support to work. However, pkcs15-init also fails on me, BTW: ./pkcs15-init -C -v -v -v [pkcs15-init] sc.c:196:sc_detect_card_presence: called [pkcs15-init]

Re: [opensc-devel] Aladdin eToken PRO 64k

2007-06-11 Thread Jan Just Keijser
Hi Nils, this is with Eddy's patch; before that I was never able to get this far ;-) also, I can dump the contents of my etoken now using ./opensc-tool -f and even a 'get' a file using opensc-explorer seems to work now, except for the fact that I don't know what type of file it actually gets

Re: [opensc-devel] Aladdin eToken PRO 64k

2007-06-11 Thread Nils Larsch
Jan Just Keijser wrote: Hi Nils, this is with Eddy's patch; before that I was never able to get this far ;-) also, I can dump the contents of my etoken now using ./opensc-tool -f and even a 'get' a file using opensc-explorer seems to work now, except for the fact that I don't know what

Re: [opensc-devel] Aladdin eToken PRO 64k

2007-06-11 Thread Peter Stuge
On Mon, Jun 11, 2007 at 08:22:34PM +0200, Jan Just Keijser wrote: However, before a fully-opensc solution works I would have to make sure that - initializing our etokens works, including setting of a non-default SOPIN - generating and storing X509 certificates works - integration with

Re: [opensc-devel] Aladdin eToken PRO 64k

2007-06-11 Thread Eddy Nigg (StartCom Ltd.)
Jan Just Keijser wrote: Right now I've got it boiled down to - install a single RPM (for RHEL4, Fedora Core 5/6, OpenSuSE 10.x) or install one or two .deb packages on Debian or Ubuntu - follow instructions on how to add the libetpkcs11.so module to Firefox and/or Thunderbird this seems to

Re: [opensc-devel] Aladdin eToken PRO 64k

2007-06-10 Thread Eddy Nigg (StartCom Ltd.)
Try this patch (not fully tested yet). Apply to current version or trunk. Vladislav Kurz wrote: Hello all, I have a question about support for Aladdin eToken PRO 64k (CardOS V4.2B). According to wiki it seems that it is in development, but not released yet. I have compiled opensc from svn

Re: [opensc-devel] Aladdin eToken PRO 64k

2007-06-10 Thread Vladislav Kurz
On Sun, 10 Jun 2007, Eddy Nigg (StartCom Ltd.) wrote: Try this patch (not fully tested yet). Apply to current version or trunk. Thanks for the patch, i tried it with trunk. opensc-tool recognizes the card, I can expore it with opensc-explorer and see the DF and subdirectories, but I

Re: [opensc-devel] Aladdin eToken PRO 64k

2007-06-10 Thread Nils Larsch
Vladislav Kurz wrote: On Sun, 10 Jun 2007, Eddy Nigg (StartCom Ltd.) wrote: Try this patch (not fully tested yet). Apply to current version or trunk. Thanks for the patch, i tried it with trunk. opensc-tool recognizes the card, I can expore it with opensc-explorer and see the DF and