MacKenzie David T Contr AFRL/VSIO wrote: > All, > > > > It’s been almost ten years since I’ve sent in an “I’m completely lost” > email to a group or forum, but as far as interrogating the certificate > on my SmartCard goes, I’m at that point. ;-> So here goes… > > > > I’ve compiled [and am running] pcsc-lite 1.3.1 and the OmniKey 3121 > driver on my Fedora [Core 5] box. When I insert and then remove my > card, I get the following in /var/log/messages, which I think is good: > > > > Jun 8 07:58:17 xxxxxxxxxxxxxxx pcscd: > > eventhandler.c:419:EHStatusHandlerThread() Card inserted into OMNIKEY > CardMan 3x21 00 00 Jun 8 07:58:17 RLVSIWMACKENZD2 pcscd: Card ATR: 3B > 75 12 00 00 29 05 01 04 01 > > Jun 8 08:22:13 xxxxxxxxxxxxxxx pcscd: > > eventhandler.c:350:EHStatusHandlerThread() Card Removed From OMNIKEY > CardMan 3x21 00 00 > > > > I pulled [and compiled] all the GlobalPlatform code from sourceforge. > The following commands [I think] show that I have both GlobalPlatform > 3.0.2 and gpshell 1.3.1 compiled successfully. > > > > /home/xxx/card_stuff/globalplatform>*which gpshell * > > /usr/local/bin/gpshell > > /home/mackenzd/card_stuff/globalplatform>*ls -al /usr/local/lib/libG** > > -rw-r--r-- 1 root root 193996 Jun 7 13:58 > /usr/local/lib/libGlobalPlatform.a > > -rwxr-xr-x 1 root root 894 Jun 7 13:58 > /usr/local/lib/libGlobalPlatform.la > > lrwxrwxrwx 1 root root 26 Jun 7 13:58 > /usr/local/lib/libGlobalPlatform.so -> libGlobalPlatform.so.1.2.0 > > lrwxrwxrwx 1 root root 26 Jun 7 13:58 > /usr/local/lib/libGlobalPlatform.so.1 -> libGlobalPlatform.so.1.2.0 > > -rwxr-xr-x 1 root root 172026 Jun 7 13:58 > /usr/local/lib/libGlobalPlatform.so.1.2.0 > > > > So now where do I go/what do I do to see the certificate on my card. > How would I, say, change my pin. The OpenManager GUI Screenshot on > Sourceforge looks nice, but I don’t know how to invoke it.
There is a contained README in the OpenManager GUI. But, it does only work for some OpenPlatform 2.0.1' cards, so you must look at your smart card, what it supports, in general you should use gpshell, it is much more stable. Apart from that, GlobalPlatform and GPShell do only install an application on a smart card (A smart card which supports the OpenPlatform or GlobalPlatform standard), nothing else, you must install an application on your card, for the MUSCLE project this would be the MuscleCard applet (CardEdge applet). This application on the card can be used with a program on the computer to perform some operations. Buy a JavaCard, install the CardEdge applet, install the musclecard components, execute bundletool for your inserted smart card and run muscleTool, where you must format your card and can later copy objects on the card, e.g. certificates, but in general this is only meaningful, if the application you want to use with the certificate can understand the format and talks to the smart card, the Muscle PKCS#11 module can do this. Use it with Thunderbird, Mozilla, ... and sign your emails, before this you must import the certificate from your CA to your card ... There should be a README contained with the PKCS#11 module. Karsten > > > > Thanks and any help is really, really appreciated. > > > > Lost in the woods, > > > > David > > > ------------------------------------------------------------------------ > > _______________________________________________ > Muscle mailing list > [email protected] > http://lists.drizzle.com/mailman/listinfo/muscle _______________________________________________ Muscle mailing list [email protected] http://lists.drizzle.com/mailman/listinfo/muscle
