Since the internal format of your certificate is very card specific, I can
only guess that your file is in ASN.1 format. A good description of ASN.1 is
the "Layman's Guide to a Subset of ASN.1,BER and DER"
http://borg.isc.ucsb.edu/aka/auth/ASN1layman.htm
If you're able to post your certificate as a hex dump, it is probably much
easier to give you more information.
Michael
PS: The meaning of the command 00 2a can also be card dependend. With my
card (TCOS) it is the "perform security operation" command which is used to
encrypt and sign data with the card.
> -----Original Message-----
> From: marilen [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, April 25, 2001 1:33 PM
> To: Assen Kolov
> Cc: opencard
> Subject: Re: [OCF] cert file
>
>
> i want to do some signing at some point but at this point i
> do not know
> exactly how and i will still need to know the info from that
> certificate. About the signing how exactly i should proceed? And the
> ideea is i do not know the format of that certificate.
>
> Assen Kolov wrote:
>
> > >I want to be able to read info from the user
> > > and card issuer to not just sign (i other words i
> have no ideea
> > about
> > > signing at this point)
> >
> > You do not need a smart card to do that. Parse the
> certificate with
> > some tool or library on your computer. (openssl, KeyTools
> Lite are both
> > free). If the certificate is on the card, first read it.
> PKCS#11 functions
> > do not support that.
> >
> > Assen Kolov wrote:
> >
> >>> In a sense, it does mot matter. All you do with a certificate is:
> >>> 1. Put it in a card (C_CreateObject(....))
> >>> 2. Read it from the card (C_GetAttribute( ... CKA_VALUE))
> and send it to
> >>> whoever might be interested in it.
> >>> There are no cryptograpic services performed on the card using the
> >>> certificate. For that you have the private and public key stored
> >>
> >> separately.
> >>
> >>> As long you have a valid certificate and you are able to
> store it on the
> >>> card and read the same data later, you have no worries.
> >>>
> >>> Assen
> >>>
> >>>> -----Original Message-----
> >>>> From: Karl Scheibelhofer [SMTP:[EMAIL PROTECTED]]
> >>>> Sent: Wednesday, April 25, 2001 12:20 PM
> >>>> To: marilen; opencard
> >>>> Subject: RE: [OCF] cert file
> >>>>
> >>>> that depends on the card. internally they may use any
> format they like.
> >>>
> >> to
> >>
> >>>> the outside world all of them i know use X509, but you
> need to convert
> >>>
> >> if
> >>
> >>>> yourself, if you read it using opencard (a pkcs#11
> driver does that for
> >>>> you). what card do you use?
> >>>>
> >>>> Karl
> >>>>
> >>>>> -----Original Message-----
> >>>>> From: marilen [mailto:[EMAIL PROTECTED]]
> >>>>> Sent: Tuesday, April 24, 2001 2:47 PM
> >>>>> To: opencard
> >>>>> Subject: [OCF] cert file
> >>>>>
> >>>>>
> >>>>> does anybody knows which is the format in which a cert
> is stored on
> >>>>
> >> the
> >>
> >>>>> card? is it X509?
> >>>>>
> >>>>>
> >>>>>
> >>>>> ---
> >>>>>
> >>>>>> Visit the OpenCard web site at
> http://www.opencard.org/ for more
> >>>>>> information on OpenCard---binaries, source code, documents.
> >>>>>> This list is being archived at
> >>>>>
> >>>> http://www.opencard.org/archive/opencard/
> >>>>
> >>>>> ! To unsubscribe from the [EMAIL PROTECTED] mailing
> list send an
> >>>>
> >>>> email
> >>>>
> >>>>> ! to
> >>>>> ! [EMAIL PROTECTED]
> >>>>> ! containing the word
> >>>>> ! unsubscribe
> >>>>> ! in the body.
> >>>>>
> >>>>>
> >>>>>
> >>>>
> >>>> ---
> >>>>
> >>>>> Visit the OpenCard web site at http://www.opencard.org/ for more
> >>>>> information on OpenCard---binaries, source code, documents.
> >>>>> This list is being archived at
> >>>>
> >> http://www.opencard.org/archive/opencard/
> >>
> >>>> ! To unsubscribe from the [EMAIL PROTECTED] mailing
> list send an
> >>>
> >> email
> >>
> >>>> ! to
> >>>> ! [EMAIL PROTECTED]
> >>>> ! containing the word
> >>>> ! unsubscribe
> >>>> ! in the body.
> >>>
> >>
> >>
> >> ---
> >>
> >>> Visit the OpenCard web site at http://www.opencard.org/ for more
> >>> information on OpenCard---binaries, source code, documents.
> >>> This list is being archived at
http://www.opencard.org/archive/opencard/
>>
>> ! To unsubscribe from the [EMAIL PROTECTED] mailing list send an
email
>> ! to
>> ! [EMAIL PROTECTED]
>> ! containing the word
>> ! unsubscribe
>> ! in the body.
>
---
> Visit the OpenCard web site at http://www.opencard.org/ for more
> information on OpenCard---binaries, source code, documents.
> This list is being archived at http://www.opencard.org/archive/opencard/
! To unsubscribe from the [EMAIL PROTECTED] mailing list send an email
! to
! [EMAIL PROTECTED]
! containing the word
! unsubscribe
! in the body.
---
> Visit the OpenCard web site at http://www.opencard.org/ for more
> information on OpenCard---binaries, source code, documents.
> This list is being archived at http://www.opencard.org/archive/opencard/
! To unsubscribe from the [EMAIL PROTECTED] mailing list send an email
! to
! [EMAIL PROTECTED]
! containing the word
! unsubscribe
! in the body.
