On 10/11/06, Ludovic Rousseau <[EMAIL PROTECTED]> wrote:
I discovered that I cannot use an ISO Latin1 character in the tokenUid
name returned by OpenSCToken::probe(SecTokendProbeFlags flags, char
tokenUid[TOKEND_MAX_UID]). The token is not displayed in the KeyChain
application.

Comments?

As it is not required to return any specific UIDs (tokend shall
caclucate itself a uniq identifier) I would propose to  remove the UID
code. For example - currently the uid is based on the card name and
the name and serial number for esteid cards are 'emulated' and is the
same for the card for the whole two-3-year-certificates-in-6-years
cycle.

If you update your certificates (exactly the same, except new validity
period) the UID doesn't change - and safari tries to use the cached
certificates it has stored with the UID. So either the UID is
automatically re-generated every time if we don't provide it or is
calculated based on certificate contents (maybe ?) the problem would
be solved if we did not return an UID at all. Currently this would
require a manual delete from /var/db/something

This needs investigation, should do some tests...

m.
_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to