[opensc-devel] PIV Updates late breaking news

2006-02-09 Thread Douglas E. Engert
. -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel

Re: [opensc-devel] Re: PIV-2 support.

2006-02-14 Thread Douglas E. Engert
@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel mailing list opensc

Re: [opensc-devel] Re: PIV-2 support.

2006-02-16 Thread Douglas E. Engert
. Nils Larsch wrote: Hi Douglas, Douglas E. Engert wrote: Nils, The svn 2846 code looks good. I have built and done some testing, and the diffs look fine to me. I have a compile error in reader-pcsc.c with the pin-pad, so I have been commenting out the #define PINPAD_ENABLED

[opensc-devel] Change to card-piv.c to support NIST 800-73-1

2006-04-10 Thread Douglas E. Engert
will recognize either as a PIV applet. Thanks. -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 Index: card-piv.c === --- card-piv.c (revision 2867

Re: [opensc-devel] New experimental SCA (OpenSC For Apple MacOSX) release

2006-04-25 Thread Douglas E. Engert
idea? Salutations, Adiós, Jean-Pierre ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South

[opensc-devel] patch for PIV for 0.11.0-rc2

2006-05-02 Thread Douglas E. Engert
to only read the first few bytes to get the length, but further testing needs to be done to see if the cards will allow this. Thanks. -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 --- ./src/libopensc/,pkcs15

[opensc-devel] Windows Login using CSP and OpenSC

2006-05-17 Thread Douglas E. Engert
| SC_ALGORITHM_RSA_PAD_NONE | SC_PKCS15_CO_FLAG_PRIVATE}, + 0x9D, 1, 0}, { NULL, NULL, 0, 0, NULL, 0, NULL, 0} }; -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: [opensc-devel] OpenSC Smartcard plugin creation

2006-05-24 Thread Douglas E. Engert
tasks on a PIV card and it calls the card-piv.c. Thanks -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel mailing list opensc-devel@lists.opensc

Re: [opensc-devel] Windows compilation

2006-06-30 Thread Douglas E. Engert
/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc

[opensc-devel] Windows Remote Desktop Connection timeouts with smartcards

2006-07-22 Thread Douglas E. Engert
anything timing problems like this? Are there any windows tuning parameters for PC/SC? -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel mailing list

[opensc-devel] Building OpenSC on Windows with VC++8.0 and manifest files

2006-08-03 Thread Douglas E. Engert
the running of the mt command and the build should continue as normal. For exe files the last digit is a 1, for dll files it is a 2. OpenSSL-0.9.8 in their util/pl/VC-32.pl file adds a similiar line to nt.mak and ntdll.mak files for each exe and dll. Thnaks. -- Douglas E. Engert [EMAIL

[opensc-devel] OPenSC pkcs11-spy and debugging a Windows CSP

2006-08-09 Thread Douglas E. Engert
! The attached patch will look at HKEY_LOCAL_MACHINE, before HKEY_LOCAL_USER. This should not cause any problems, as the HKEY_LOCAL_MACHINE, Software\PKCS11-Spy would not normally be set, accept while the sysadmin of the machine as trying to debug a login type problem. Thanks. -- Douglas E. Engert

Re: [opensc-devel] pkcs15-gemsafe.c patch

2006-08-11 Thread Douglas E. Engert
Nils Larsch wrote: Douglas E. Engert wrote: ... The one problem not solved, (but I do have a hack to get around it) is that Id Ally assumes the card supports RSA_X_509, which requires SC_ALGORITHM_RSA_RAW which the gpk-1600 card (and maybe others) don't have. Id Ally calls C_SignInit

Re: [opensc-devel] DLL installation in SCB.

2006-08-14 Thread Douglas E. Engert
@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel mailing list

Re: [opensc-devel] DLL installation in SCB.

2006-08-15 Thread Douglas E. Engert
, and most people will not jump on it the day it is released. sure, it is wise to look out for problems to come, but Windows XP and maybe even older versions are what people currently use. Regards, Andreas -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue

Re: [opensc-devel] DLL installation in SCB.

2006-08-16 Thread Douglas E. Engert
be calling the LoadLibrary not LoadLibraryEx and this would not work. -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel mailing list opensc-devel@lists.opensc

[opensc-devel] OpenCT and limiting us of the reader to the console user only

2006-10-17 Thread Douglas E. Engert
in over the network from accessing a card in a reader inserted by the local user. I sent a similiar note to the muscle list asking about PCSC. So has anyone looked at HAL closer for OpenCT? I see it has the udev files as a start. -- Douglas E. Engert [EMAIL PROTECTED] Argonne National

Re: [opensc-devel] OpenCT and limiting us of the reader to the console user only

2006-10-19 Thread Douglas E. Engert
Ludovic Rousseau wrote: On 19/10/06, Andreas Jellinghaus [EMAIL PROTECTED] wrote: Douglas E. Engert wrote: Is there any way to have OpenCT limit access to reader devices to the user logged in at the console? sure. chgrp scard /var/run/openct and configure some pam module for login only

Re: [opensc-devel] udev and OpenCT: help for pcsc-lite

2006-10-23 Thread Douglas E. Engert
? (latest version is 100) Any udev expert here? Thanks, -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel mailing list opensc-devel@lists.opensc

Re: [opensc-devel] udev and OpenCT: help for pcsc-lite

2006-10-24 Thread Douglas E. Engert
/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc

Re: [opensc-devel] User Consent Keys

2006-10-26 Thread Douglas E. Engert
-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel mailing list opensc-devel

Re: [opensc-devel] Re: [opensc-commits] svn opensc changed [3053] update; patch supploed by Douglas E.

2006-11-13 Thread Douglas E. Engert
___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: [opensc-devel] Re: [opensc-commits] svn opensc changed [3053] update; patch supploed by Douglas E.

2006-11-13 Thread Douglas E. Engert
already know the problem and most likely worked around it?) Regards, Andreas ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne

Re: [opensc-devel] User Consent Keys

2006-11-14 Thread Douglas E. Engert
Thomas Harning Jr. wrote: On Thu, 2006-10-26 at 11:05 -0500, Douglas E. Engert wrote: I would hope you would never try to cache a pin especially with a card like the one you describe: * If the card was issued such that you had to enter the pin before every signature, then you

Re: [opensc-devel] On-board HMAC calculation

2007-01-22 Thread Douglas E. Engert
are the products on the market with this capability ? With the addition of HMAC support to JavaCard 2.2.2, I supposed this must be technically possible on JavaCards -- provided there exists JC 2.2.2 compatible products though... Cheers, -- Douglas E. Engert [EMAIL PROTECTED] Argonne

Re: RE : Re: [opensc-devel] On-board HMAC calculation

2007-01-22 Thread Douglas E. Engert
Sorry, I mis-read your note. The comments are about having a card do the hash then use it with an RSA key, rather then do a HMAC with a secret key. But see below too. Damiano ALBANI wrote: --- Douglas E. Engert [EMAIL PROTECTED] wrote : Are you trying force the card to do the HMAC, because

Re: [opensc-devel] ICCD, CCID, and Standards

2007-02-15 Thread Douglas E. Engert
___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: [opensc-devel] ICCD, CCID, and Standards

2007-02-15 Thread Douglas E. Engert
Justin Karneges wrote: On Thursday 15 February 2007 7:14 am, Douglas E. Engert wrote: Yes propriety vendor solutions are a major problem. Have a look at the PIV card comments at: http://www.opensc-project.org/opensc/wiki/UnitedStatesPIV The intent is to standardize on multiple vendors

Re: [opensc-devel] Using PIV Card to Authenticate to MAC ( Problems )

2007-03-02 Thread Douglas E. Engert
-- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc

Re: [opensc-devel] Using PIV Card to Authenticate to MAC ( Problems )

2007-03-05 Thread Douglas E. Engert
using pam_krb5. Apple has said they would fully support PIV, so we expect that when they do we would use whatever they they provide. Thank you again for your help! Ken - Original Message From: Douglas E. Engert [EMAIL PROTECTED] To: Kenneth Carrera [EMAIL PROTECTED] Cc: [EMAIL

Re: [opensc-devel] Using PIV Card to Authenticate to MAC ( Problems )

2007-03-05 Thread Douglas E. Engert
at it? I really appreciate any help you provide. Ken --- Douglas E. Engert [EMAIL PROTECTED] wrote: Kenneth Carrera wrote: Douglas, Thank you very much for the response. I really appreciate it. I tried using the opensc-tool, piv-tool, and pkcs15-tool. From those, I can bring up the card

Re: [opensc-devel] Using PIV Card to Authenticate to MAC ( Problems ) Ticket 128

2007-03-05 Thread Douglas E. Engert
Any questions? Get answers on any topic at www.Answers.yahoo.com. Try it now. -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: [opensc-devel] new pre release for 0.11.2 available

2007-03-05 Thread Douglas E. Engert
-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http

Re: [opensc-devel] new pre release for 0.11.2 available

2007-03-06 Thread Douglas E. Engert
___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 Index: src/tools/piv

[opensc-devel] opensc.conf.in changed forPIV and consistency question about max_send_size and max_recv_size

2007-03-07 Thread Douglas E. Engert
newer readers can handle this, as far as I know. Then let each card driver reset it if it is larger then the card can handle as most today today. A user with an older reader could still set it lower in opensc.conf. -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass

Re: [opensc-devel] new pre release for 0.11.2 available

2007-03-07 Thread Douglas E. Engert
Nils Larsch wrote: Douglas E. Engert wrote: One minor change, it looks like the #include internal.h was removed from pkcs15-piv.c. I can add that back in with any other changes you might want. if it is not needed why included it ? It is needed to get the config.h so it could test

Re: [opensc-devel] opensc.conf.in changed forPIV and consistency question about max_send_size and max_recv_size

2007-03-07 Thread Douglas E. Engert
for everyone? does the code work correct, if there is no setting in the config file? I read it as setting it to SC_APDU_CHOP_SIZE as 248 which is less then the 252 in the opensc.conf.in had in it. Regards, Andreas -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700

Re: [opensc-devel] new pre release for 0.11.2 available

2007-03-08 Thread Douglas E. Engert
able to compile with and without zlib on any platform Thanks. Douglas E. Engert wrote: More in Windows and zlib. Looking at the SCB trunk/Makefile.mak, lines 81-83: perl -p -e s/#ZLIB_DEF/ZLIB_DEF/g -i~ win32\Make.rules.mak perl -p -e s/C:\\ZLIB\\INCLUDE/$(DESTP)\\include/g -i~ win32

Re: [opensc-devel] new pre release for 0.11.2 available

2007-03-11 Thread Douglas E. Engert
} where opensc.h #define SC_APDU_CHOP_SIZE 248 I don't see SC_APDU_CHOP_SIZE used anywhere else. -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: [opensc-devel] new pre release for 0.11.2 available

2007-03-12 Thread Douglas E. Engert
as this is only used by ctx.c to set the max_send/recv_size. -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 Index: src/pkcs11/Makefile.mak

Re: [opensc-devel] new pre release for 0.11.2 available

2007-03-14 Thread Douglas E. Engert
Andreas Jellinghaus wrote: Am Dienstag, 13. März 2007 20:34 schrieb Douglas E. Engert: While trying to building on Max OS against revision 3128, I see I missed one of Nil's comments. The attached patch uses the strings.h and stdlib.h and fixes the // comment. It compiles on Ubuntu, XP and Mac

Re: [opensc-devel] D-TRUST-2048-Bit card .. Compute signature failed: Internal error

2007-03-14 Thread Douglas E. Engert
-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc

Re: [opensc-devel] D-TRUST-2048-Bit card .. Compute signature failed: Internal error

2007-03-14 Thread Douglas E. Engert
. Ludovic Rousseau wrote: On 14/03/07, Douglas E. Engert [EMAIL PROTECTED] wrote: I wonder if this is one of the cards/readers that can not handle the default max_send_size/max_recv_size = 256. It looks like he is using the SCM SPR 532 [1]. This reader is limited to an APDU of 260 bytes [2

Re: [opensc-devel] Cryptoflex 32K e-gate cards do not work with opensc trunk anymore

2007-03-16 Thread Douglas E. Engert
mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: [opensc-devel] Cryptoflex 32K e-gate cards do not work with opensc trunk anymore

2007-03-19 Thread Douglas E. Engert
/SC SCardGetAttrib SCARD_ATTR_MAXINPUT would work with max_send_size = SCARD_ATTR_MAXINPUT - 5; Ludovic Rousseau wrote: On 16/03/07, Douglas E. Engert [EMAIL PROTECTED] wrote: Can you run the command that is listed in the new opensc.conf: # This sets the maximum send and receive sizes

Re: [opensc-devel] new pre release for 0.11.2 available

2007-03-20 Thread Douglas E. Engert
be used to make cryptoflex_compute_signature simpler. Yes it does. Any other cards too? ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL

Re: [opensc-devel] back again

2007-04-11 Thread Douglas E. Engert
-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel mailing list opensc-devel

[opensc-devel] Re: changes before 0.11.2?

2007-04-23 Thread Douglas E. Engert
readers have limitions. Regards, Andreas ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South

Re: [opensc-devel] OpenSC - SCB with 0.11.2

2007-05-10 Thread Douglas E. Engert
Andreas Jellinghaus wrote: On Wednesday 09 May 2007 17:07:37 Douglas E. Engert wrote: I see you built the SCA with 0.11.2, are you going to build the SCA with 0.11.2 soon? as soon as I find time. I hope tomorrow (but I had the same hope for days...). Andreas Looks like you found time

Re: [opensc-devel] OpenSC - SCB with 0.11.2

2007-05-10 Thread Douglas E. Engert
Peter Stuge wrote: On Thu, May 10, 2007 at 12:33:03PM -0500, Douglas E. Engert wrote: I can now update my PowerPoint sides for a talk in 4 hours at the AFS Kerberos Best Practices Workshop. Would you be willing to post a .pdf with the slides somewhere? Gave the same talk at NIST q few

Re: [opensc-devel] OpenSC - SCB with 0.11.2

2007-05-10 Thread Douglas E. Engert
Peter Stuge wrote: On Thu, May 10, 2007 at 03:59:30PM -0500, Douglas E. Engert wrote: Would you be willing to post a .pdf with the slides somewhere? Gave the same talk at NIST q few weeks ago, before 0.11.2 was released: http://middleware.internet2.edu/pki07/proceedings/slides/10-engert

Re: [opensc-devel] OpenSC - SCB with 0.11.2

2007-05-11 Thread Douglas E. Engert
-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: [opensc-devel] OpenSC - SCB with 0.11.2

2007-05-14 Thread Douglas E. Engert
Andreas Jellinghaus wrote: On Friday 11 May 2007 19:12:13 Douglas E. Engert wrote: Since you have built scb-0.8, but not updated the main page, you may want to add these changes: win32/version.rc needs to be changed to 0.11.2 in 4 places. The src/libopensc/Makefile.mak

[opensc-devel] Updating OpenSC PIV to support RSA 2048, 3072 and question on p15card-helper

2007-05-17 Thread Douglas E. Engert
. -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc

Re: [opensc-devel] Updating OpenSC PIV to support RSA 2048, 3072 and question on p15card-helper

2007-05-17 Thread Douglas E. Engert
Thomas Harning Jr. wrote: On Thu, 2007-05-17 at 10:28 -0500, Douglas E. Engert wrote: Thomas, I am in the process of updating the PIV code in the OpenSC package to support RSA 2048 and 3072 bit keys. This include being able to use the PIV-tool to generate them, and the openssl req

Re: [opensc-devel] PIV patch for OpenSC and SCA

2007-05-17 Thread Douglas E. Engert
they are not a JavaCard... no CPLC exists. -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org

Re: [opensc-devel] PIV patch for OpenSC and SCA

2007-05-17 Thread Douglas E. Engert
into that. Maybe someone familiar with the Mac can comment on what the Max needs. -Rusty -Original Message- From: Douglas E. Engert [mailto:[EMAIL PROTECTED] Sent: Thursday, May 17, 2007 2:02 PM To: Larner, Russell Cc: Thomas Harning Jr.; opensc-devel@lists.opensc-project.org Subject: Re

[opensc-devel] General back ground information on National ID cards

2007-05-22 Thread Douglas E. Engert
is going to be for government employees and contractors. Thanks. -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel mailing list opensc-devel

Re: [opensc-devel] Three tickets derived from RSA patch for PIV cards from 05/17/2007

2007-05-23 Thread Douglas E. Engert
back to certificate hashes.) -Rusty -Original Message- From: Douglas E. Engert [mailto:[EMAIL PROTECTED] Sent: Wednesday, May 23, 2007 11:55 AM To: OpenSC-devel Cc: Larner, Russell; Thomas Harning Jr. Subject: Three tickets derived from RSA patch for PIV cards from 05/17/2007

Re: [opensc-devel] pksc15 private key

2007-05-24 Thread Douglas E. Engert
or PJCS15 is treating it as private. With a card you don't read the private key, you tell the card to perform some crypto operation using the key on the card. On many cards there is also a coresponding public key, that is readable. Thanks in advance, Eduardo Ellery -- Douglas E. Engert [EMAIL

Re: [opensc-devel] pksc15 private key

2007-05-24 Thread Douglas E. Engert
Eduardo Ellery wrote: Answers below! :) On 5/24/07, *Douglas E. Engert* [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: eduellery wrote: Good evening mates, I'm in a desperate need for a pkcs-15 der encoded private key. I read the pkcs#15 spec

Re: [opensc-devel] PIV serial number

2007-05-25 Thread Douglas E. Engert
] ** ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National

[opensc-devel] Combined updates for PIV

2007-06-05 Thread Douglas E. Engert
the 0x53 starting tag is returned. The 0.11.2 code the would return the first tagged item, which meant the full object was not accessible. o If the get_data reads zero bytes, a zero length is now returned. New cards with no certs at all look like this. -- Douglas E. Engert [EMAIL

[opensc-devel] Why multiple slots for the same card, and the need for onepin-opensc-pkcs11.so

2007-06-08 Thread Douglas E. Engert
and run into the problems of how to handle the objects, and get pkcs15-tool and pkcs11-tool to list and read them.) -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: [opensc-devel] Aladdin eToken PRO 64k

2007-06-11 Thread Douglas E. Engert
: +1.213.341.0390 ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E

Re: [opensc-devel] Aladdin eToken PRO 64k

2007-06-11 Thread Douglas E. Engert
Eddy Nigg (StartCom Ltd.) wrote: Douglas E. Engert wrote: Sounds like a emulation routine could be writen. Has anyone looked at that? I would assume you would want to use the same certificates as used with Windows and the vendor's other software. One could maybe receive the relevant docs

Re: [opensc-devel] Aladdin eToken PRO 64k

2007-06-11 Thread Douglas E. Engert
: Douglas E. Engert wrote: Sounds like a emulation routine could be writen. Has anyone looked at that? I would assume you would want to use the same certificates as used with Windows and the vendor's other software. One could maybe receive the relevant docs from Aladdin, but to all of my knowledge

Re: [opensc-devel] Why multiple slots for the same card, and the need for onepin-opensc-pkcs11.so

2007-06-11 Thread Douglas E. Engert
be affected by this change as it defines two pins an auth pin and a SO_PIN, much like the PIV card does. Douglas E. Engert wrote: I am trying to understand the logic in the framework-pkcs15.c which uses two (or more) slots for objects that require a PIN, and an additional slot for all remaining

Re: [opensc-devel] Why multiple slots for the same card, and the need for onepin-opensc-pkcs11.so

2007-06-12 Thread Douglas E. Engert
Martin Paljak wrote: On 08.06.2007, at 21:38, Douglas E. Engert wrote: The SC_PKCS15_CO_FLAG_PRIVATE appears to be used to set the PKCS#11 CKA_PRIVATE attribute so an application calling PKCS#11 can tell if an object needs to use a PIN or not before trying to use the object. ... Looks

Re: [opensc-devel] Why multiple slots for the same card, and the need for onepin-opensc-pkcs11.so

2007-06-13 Thread Douglas E. Engert
Martin Paljak wrote: On 14.06.2007, at 1:00, Douglas E. Engert wrote: So it looks like the latest FireFox 2.0.0.4 is working much better. * Certificate selection is still broken - it selects nonrepudiation certificate with no ssl client certificate usage bits automatically even though

Re: [opensc-devel] Issue in Certificate logon in XP

2007-06-15 Thread Douglas E. Engert
@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel

Re: [opensc-devel] find key information when creating the certificate in card driver

2007-06-27 Thread Douglas E. Engert
___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: [opensc-devel] new opensc and openct pre releases

2007-07-05 Thread Douglas E. Engert
recent improvements out of the door to our users. Thanks, Andreas ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED

Re: [opensc-devel] new opensc and openct pre releases

2007-07-05 Thread Douglas E. Engert
: fatal error U1073: don't know how to make '..\pkcs15init\pkcs15init.lib' Stop. Thanks, Andreas ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert

Re: [opensc-devel] regarding p15 emulation support

2007-07-09 Thread Douglas E. Engert
only mode so far. but I might be wrong. Nils? Regards, Andreas ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED

Re: [opensc-devel] Issue in Certificate logon in XP

2007-07-12 Thread Douglas E. Engert
will see what I can do to do some more testing of 0.11.3-pre on XP. Please give your opinion. Regards, Kamal. --- Douglas E. Engert [EMAIL PROTECTED] wrote: kamal kumar wrote: Hi all, I tried certificate logon with Identity Alliance CSP and opensc-pkcs11 module in XP machine

Re: [opensc-devel] new pre-release opensc 0.11.3-pre1 for testing - ticket #149

2007-07-12 Thread Douglas E. Engert
___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: [opensc-devel] Issue in Certificate logon in XP

2007-07-13 Thread Douglas E. Engert
and second failed logon. Please give your opinion. Regards, Kamal. --- Douglas E. Engert [EMAIL PROTECTED] wrote: kamal kumar wrote: Hi all, I tried certificate logon with Identity Alliance CSP and opensc-pkcs11 module in XP machine. The certificate logon works fine for the first

Re: [opensc-devel] atrust-acosi in opensc.conf

2007-07-17 Thread Douglas E. Engert
___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: [opensc-devel] Issue in Certificate logon in XP

2007-07-17 Thread Douglas E. Engert
not all the session opened by CSP are closed. From the pkcs11-spy log, it is not closing session 1, 2. Can you please verify the log again and give your opinion. Regards, Kamal. --- Douglas E. Engert [EMAIL PROTECTED] wrote: Corcoran David wrote: Hi, Is this an issue from the CSP

Re: [opensc-devel] Encryption with NetKey

2007-07-18 Thread Douglas E. Engert
-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http

Re: [opensc-devel] Issue in Certificate logon in XP

2007-07-18 Thread Douglas E. Engert
(P11 session 1, 2 are sill opened), opensc-pkcs11 module keeps the pc/sc connection established by sc_connect_card function. I think we need to investigate more throughly on this issue. Regards, Kamal. --- Douglas E. Engert [EMAIL PROTECTED] wrote: kamal kumar wrote: Hi, I

Re: [opensc-devel] Encryption with NetKey

2007-07-19 Thread Douglas E. Engert
mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: [opensc-devel] Encryption with NetKey

2007-07-20 Thread Douglas E. Engert
Dmitry Zhigulin wrote: Douglas E. Engert deengert at anl.gov writes: Can you use C_Verify instead? I meant as a stating point to write the missing C_Encrypt code for OpenSC pkcs11. How to use it for encryption, may you show example? I found in pkcs11-tool example - function

Re: [opensc-devel] reading data objects using opensc-pkcs11 module

2007-07-31 Thread Douglas E. Engert
-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org

Re: [opensc-devel] using decryption card command for CardOS when signing

2007-08-02 Thread Douglas E. Engert
specific modification, and so should be localized to the card-cardos.c module. You mod is more likely to be accepted if you can localize it. Lars Douglas E. Engert wrote: Lars Silvén wrote: Hi list, This is an attempt to persuade you to add functionality to opensc. I have already made

Re: [opensc-devel] engine-pkcs11 incompatible version?

2007-08-08 Thread Douglas E. Engert
___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: [opensc-devel] new opensc 0.11.4-rc1 release candidate availableHi,

2007-08-20 Thread Douglas E. Engert
___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439

[opensc-devel] Testing OpenSC-0.11.4-rc1 with cardos-PrimeCard

2007-08-21 Thread Douglas E. Engert
/libopensc/reader-pcsc.c:175:pcsc_internal_transmit: called [opensc-pkcs11] ../../../src/src/libopensc/reader-pcsc.c:282:refresh_slot_attributes: called -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: [opensc-devel] Testing OpenSC-0.11.4-rc1 with cardos-PrimeCard

2007-08-22 Thread Douglas E. Engert
Nils Larsch wrote: Douglas E. Engert wrote: Lars Silvén wrote: Douglas, You got to have a reader capable of extended APDU. Then no chaining is needed since the commands may exceed 256 bytes. Well what if I don't have a reader that is capable of extended APDU, buy another one ? Ubuntu

Re: [opensc-devel] new OpenSC release 0.11.4

2007-09-11 Thread Douglas E. Engert
-- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc

Re: [opensc-devel] [Gemsafe] Xpresso 16/32k

2007-09-17 Thread Douglas E. Engert
value in the sc_pkcs15_cert_info sc_pkcs15_pubkey_info and sc_pkcs15_prkey_info. Look for the calls to sc_pkcs15_format_id in pkcs15-piv.c. Someone can help me,please? Thanks in advance Bye -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue

Re: [opensc-devel] How to verify certificate on card? And other questions...

2007-09-17 Thread Douglas E. Engert
___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

Re: [opensc-devel] opensc and Vista

2007-09-18 Thread Douglas E. Engert
-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http

Re: [opensc-devel] opensc and Vista

2007-09-20 Thread Douglas E. Engert
/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc

Re: [opensc-devel] patch to libp11

2007-10-03 Thread Douglas E. Engert
? ___ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444

[opensc-devel] OpenSC updates for PIV NIST-800-72-2 Ticket #165

2007-11-08 Thread Douglas E. Engert
I submitted bug report #165 on Tuesday to update card-piv.c and pkcs15-piv.c for support for draft NIST-800-72-2 and some fixes. Can this be committed to SVN some time this week? Thanks. -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue

Re: [opensc-devel] GemSafe driver

2007-11-12 Thread Douglas E. Engert
Ludovic Rousseau wrote: 2007/11/9, Douglas E. Engert [EMAIL PROTECTED]: We also have some newer GemSAFE card used with Windows, with ATR: 3b:7a:94:00:00:80:65:a2:01:01:01:3d:72:d6:43 Gemplus GemXpresso Pro R3 E32 PK (I believe), but we never wrote the driver for these Would you expect

Re: [opensc-devel] GemSafe driver

2007-11-12 Thread Douglas E. Engert
can get further, but pkcs15_prkey_sign is failing... Douglas E. Engert wrote: Ludovic Rousseau wrote: 2007/11/9, Douglas E. Engert [EMAIL PROTECTED]: We also have some newer GemSAFE card used with Windows, with ATR: 3b:7a:94:00:00:80:65:a2:01:01:01:3d:72:d6:43 Gemplus GemXpresso Pro R3

Re: [opensc-devel] GemSafe driver

2007-11-13 Thread Douglas E. Engert
mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel -- Douglas E. Engert [EMAIL PROTECTED] Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 Index: card-gemsafeV1.c

  1   2   3   4   5   6   >