On 02/14/10 01:50 AM, Paul Klissner wrote:
Kevin,
Sun has an implementation that is built for Solaris 10,
which you should be able to find at sun.com by searching for PC/SC-lite.
Paul,
I went ahead and downloaded the packages, but before I install them,
have you heard of anyone successfully using these packages in
conjunction with Red Hat's coolkey (apparently not updated since around
2007) and Mozilla Firefox?
The reason I ask is because the Sun Studio-compiled pcsc-lite and ccid I
built from the opensource project seem to work fine. Moreover, as of the
latest "betas" from Ludovic Rousseau, both pcsc-lite and ccid build for
me just fine on recent OpenSolaris (snv_132) with gcc.
The problem regardless of how I compile pcsc-lite and ccid is loading
the coolkey pkcs11 module in Firefox. I need to complete that step
before I can access DoD CAC-restricted sites and webmail from OpenSolaris.
I recently worked with someone who installed the packages on OpenSolaris,
and I think the only problems they had might have been with USB reader
support because some of the libusb libraries were moved in OpenSolaris.
That was easily resolved by creating a logical link or something.
I think on Solaris 10 the optional libusb packages install in the prefix
/usr/sfw/ whereas in recent Nevada/Indiana builds they install in the
system prefix /usr/
If you want to go that route let me know - get the packages and if
it doesn't work, perhaps we can exchange a couple of e-mails and see if
I can help you resolve it quickly. I can't invest a lot of time helping
you make it work on a non-target platform (Solaris 10 is what it
was designed to conform to for release), but I think it would probably
work out better for you than what I see below.
Thank you for your offer to help!
As I mentioned before, unless I can get coolkey to play nice with the
Sun-provided PC/SC-lite and CCID IFD Handler packages and Firefox, I
don't have much point in running these. The only smart card I use is a
DoD CAC, and coolkey is the only pkcs11 module I know of that will
support it. (There are supposedly newer PIV-compliant smart cards being
issued by DoD, but I can say from experience it's still hit or miss
whether a newly issued card will be one of the old CACs or one of the
new PIV-compliant cards).
It is based on an earlier version of PC/SC-lite from the Open Source gate
(1.3.2 or something), so it doesn't have dependencies on libHAL, which
is not in Solaris 10 anyway. It isn't sync'd up with the Open Source code,
but we do have lots of customers using it, and it actually scales up
to support hundreds of users running simultaneously doing login to Windows
in a UNIX/Windows virtual desktop environment.
And it is turnkey. When the packages are installed it is running,
and enabled/disabled through the Solaris SMF framework.
If these Sun-provided packages will work with coolkey and Firefox, this
sounds like the most convenient option. Thanks again for pointing these
out and perhaps I'll give this a try.
Kevin
Paul
_______________________________________________
Muscle mailing list
[email protected]
http://lists.drizzle.com/mailman/listinfo/muscle
