|
Did you configure Mozilla to import the muscle
crypto module?... so its GUI can drive the device through the PKCS#11
interface?
Remember, the xcard GUI talks msc's .so interface
to the device. Then, recall that PKCS11 is a method wrapper around the msc
module's API.
Rather than Mozilla talking to a visual control
(e.g. viewing the xcard application as an embedded viewable GUI control), think
of it talking to the underlying msc .so library within xcard (via the PKCS#11
API mapping.)
Remember: all the msc library does is bind C data
structures and method invocations used by programmer to the wire format
used by the card signalling layer - that the javacard (or other COS) applet will
later decodes, byte by byte, upon receipt, before invoking the signalled method,
in a java context.
Then recall that the msc library comes in two
parts:
(a) the above (via a "plugin" for the wire format
formatter - to use a term from java speak)
(b) a protocol engine, that fragments large method
argument into a series of primitive method invocations, and vice
versa.
If you have the mozilla configuration setup, and
have the mental model expressed above, you can understand that when mozilla
drives creation of keys using an applet instance, and files a cert as an object,
then actual application information data gets created and
transferred.
-------
I believe there are some tools which can also
intelligetly copy the certs in one framework's cert stores the objects in one of
the applet instances on a card. But, this is like copying data from one file
store to another - it doesnt create a working cryptocard, without the
corresponding keys. Such a tool may be worth using once the applet instance
is operational as a cryptomodule: the tool could populate the hierarchical
certs, which may be used by some applications to configure the secure
interworking of users in different key management domains.
----- Original Message -----
|
_______________________________________________ Muscle mailing list [EMAIL PROTECTED] http://lists.drizzle.com/mailman/listinfo/muscle
