Hello, On Mar 3, 2011, at 9:10 PM, Peter Keller wrote: > This may be a silly question (I am not a real expert in this area), so please > tell me (politely!) if it is.... Is there any way that CCID could work with > Rainbow iKey3000 USB tokens? Although they are no longer made, we are still > using them and others may be as well. No the iKey3000 is not a CCID device to my knowledge.
> Some background: we have been using them to hold a public key for use with > OpenSSH on various flavours of Linux for quite a long time, but I can't get > them to work with release candidate 2 of the upcoming openSUSE 11.4 release. > After some research I have come to the conclusion that the problem is that we > have been relying on OpenCT. openSUSE has moved smartcard support from hald > to udev in 11.4, and this, or something else, has broken the communication > between pcscd and the OpenCT driver with a message like: > > pcscd: dyn_unix.c:81:DYN_GetAddress() IFDHCreateChannelByName: > /usr/lib/readers/openct-ifd.bundle/Contents/Linux/openct-ifd.so: undefined > symbol: IFDHCreateChannelByName > pcscd: readerfactory.c:962:RFInitializeReader() Open Port 0x200000 Failed > (usb:04b9/1300:libusb-1.0:5:10) > pcscd: readerfactory.c:273:RFAddReader() Rainbow iKey 3000 init failed. > pcscd: utils.c:95:CheckForOpenCT() Remove OpenCT and try again > > and indeed when I look through the OpenCT sources, IFDHCreateChannelByName is > not implemented anywhere. Both the error message itself and posts such as > this one from Andreas Jellinghaus: > seem to suggest that we should switch from OpenCT to CCID, but it doesn't > look to me that CCID supports this token. pcscd produces no output at all > when it is inserted. To get access to legacy USB tokens (not CCID/ICCD) which are supported by OpenCT, there are two options: a) request a opensc-ctapi package from your distro and use OpenCT directly b) file a bug against OpenCT so that the necessary function would be implemented (a patch would be the best) Do not install libccid if you don't use any CCID drivers. A release of OpenCT that would make the CCID driver compilation optional, to better co-exist with pcsc-lite+ccid would maybe do good. -- @MartinPaljak.net +3725156495
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ Muscle mailing list [email protected] http://lists.drizzle.com/mailman/listinfo/muscle
