>
> douglas suggested the piv driver, so have a look at that one.
>

Yes, Our messages have crossed.

coolkey or javacardsign are alternatives. but they implement only support
> for their applet each, as far as I know. so if you look for a flexible
> software that can work with different cards/applets, opensc is your best
> choice I think.
>

Yes indeed, this seems to be the best option.

to access a card via pkcs#11 api and use it that you need a lot of
> infrastructure. for example applications expect x.509 certificates on
> the card, not only an rsa key. applications want to know how many
> certificates/rsa keys/data objects there are and get information about
> each. you need a pin that protects private keys and private data,
> and apps might want meta information about the pin too (how long is
> it, only numbers or also characters etc.).
>
> if you use the infrastructure opensc provides you already have most
> of that for free. you can start with a simple driver, that emulates
> everything / not uses anything from the card. and then add some stuff
> that is backed by the card, such as a pin, a certificate or an rsa key.
>

OK.

Thanks again for your help ; I'll get back to you when I meet the next
problem... ;-)

Ben
_______________________________________________
opensc-devel mailing list
[email protected]
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to