Olivier LAHAYE wrote on 05/24/06 09:24 AM:
Dear all,

As I'm unable to use my GemXpresso211PK/IS, I've fallen back to do my tests using an AXALTO CyberFlex 64K.

under muscleTool, I'm able to list tokens, but I cannot connect :-(

Here is what I've done so far:

1) inserted the card and read the ATR using pcsc_scan.
the ATR is "3B 95 95 40 FF AE 01 03 00 00"

2) I've inserted the ATR in the /usr/share/pcsc/smartcard_list.txt
and checked that now, pcsc_scan recognize it.

3) I loaded the CardEdge.bin applet to the card using CFlexAccess32Loader/load.sh (it apparently succeeded).

4) As root, I've run the /usr/sbin/bundleTool and selected the mscMuscleCard.bundle thus the file /usr/lib/pcsc/services/mscMuscleCard.bundle/Contents/Info.plist has been updated with <string>3B959540FFAE01030000</string> value.
thus the end of the file became:
        <key>spAtrValue</key>
        <string>3B959540FFAE01030000</string>
        <string>3B8540206801010204</string>
        <string>3B8540206801010204</string>
        <string>3B751300009C02020102</string>
        <string>3B6500009C02020102</string>
        <string>3B3B94008065AF030D0174830F9000</string>
        <string>3F6D000080318065B00501025E83009000</string>
        <key>spDefaultApplication</key>
        <string>A00000000101</string>

5) As normal user I started muscleTool

6) I typed "tokens" and saw: "1. MuscleCard Applet"

7) I typed "connect 1" which failed as expected as the card is not formatted.

8) I typed "format 1" and it failed with the following error:
muscleTool > format 1
ERR: EstablishConnection Failed ! (0x9C52 Token is unsupported)

Don't try to "connect" before you "format" - just "tokens" then "format
1".

    ~Iain




9) I tried an establish connection using gpshell and the output seemed correct:
gpshell < Nothing.txt
enable_trace
establish_context
card_connect
select -AID a0000000030000
--> 00A4040007A0000000030000
<-- 6F198408A000000003000000A50D9F6E062091010342759F6501FF9000
card_disconnect
release_context

10) tryed the list.txt gpshell script with success:
rpm/BUILD/gpshell-1.3.1 $ gpshell < list.txt
mode_201
enable_trace
establish_context
card_connect
select -AID a0000000030000
--> 00A4040007A0000000030000
<-- 6F198408A000000003000000A50D9F6E062091010342759F6501FF9000
open_sc -security 1 -keyind 0 -keyver 0 -mac_key 404142434445464748494a4b4c4d4e4f -enc_key 404142434445464748494a4b4c4d4e4f // Open secure channel
--> 80500000085305CEB73CAB6BEE00
<-- 00005000251618185E48010131C07B2F595AE9CE47EC04B55836C75F9000
--> 8482010010CD38BF5AA9683A187774C86B26D96AEC
<-- 9000
get_status -element e0
--> 80F2E000024F0000
<-- 08A000000003000000070007A0000000620001010007A0000000620101010007A0000000620102010007A0000000620201010007A000000003000001000EA000000030000070006800102030010007A000000132000101000EA00000003029057000AD14100101010007A0000000035344010007A0000000035350010005A00000000101009000

List of applets (AID state privileges)
a000000003000000        7       0
a0000000620001  1       0
a0000000620101  1       0
a0000000620102  1       0
a0000000620201  1       0
a0000000030000  1       0
a000000030000070006800102030    1       0
a0000001320001  1       0
a00000003029057000ad14100101    1       0
a0000000035344  1       0
a0000000035350  1       0
a000000001      1       0
card_disconnect
release_context

===================================

Thus it seems that I have no problem authenticating with this card, but I'm less successfull using muscleTool.

what could be wrong?
- is the CardEdge.bin applet shipped with CFlexAccess32Loader incompatible with muscleTool? - can it be a problem with muscleTool config/compilation/installation I've made?
- could it be la version incompatibility between muscleTool/libmusclecard?

Many thanks for your help, and sorry for so many mails.
--
        Olivier LAHAYE
        Motorola Labs IT Manager
        Computer & Information Systems
        European Communications Research
_______________________________________________
Muscle mailing list
[email protected]
http://lists.drizzle.com/mailman/listinfo/muscle
_______________________________________________
Muscle mailing list
[email protected]
http://lists.drizzle.com/mailman/listinfo/muscle

Reply via email to