Please don't allow the user to accidentally try and change the PUK. The PUK should be reserved for the card admin, not the user. If the OpenSC is going to provide a way to change the PUK, via PKCS#11, please consider making this an option (off by default) in the opensc.conf.
Viktor TARASOV wrote: > Hi Martin, > > Martin Paljak wrote: >> On Jan 28, 2010, at 10:28 , [email protected] wrote: >> >>> Revision: 3952 >>> Author: viktor.tarasov >>> Date: 2010-01-28 08:28:25 +0000 (Thu, 28 Jan 2010) >>> >>> Log Message: >>> ----------- >>> pkcs11: do not create slot for PUK >>> >> This provided an easy way to change the PUK code via a GUI - Firefox. Are >> there other waysd a PUK code could be exposed via PKCS#11? >> > > > Fairly, I've done it in a reason of Firefox -- when looking for the > keys, it tries to login into the every available slot . > > Do we really need to be able to change PUK through PKCS#11? > If so, I will roll it back. > > Or as usual, > I can replace decision to the pkcs11 section of opensc.conf. > > > Viktor. > > -- Douglas E. Engert <[email protected]> Argonne National Laboratory 9700 South Cass Avenue Argonne, Illinois 60439 (630) 252-5444 _______________________________________________ opensc-devel mailing list [email protected] http://www.opensc-project.org/mailman/listinfo/opensc-devel
