Hi Andreas,

Andreas Jellinghaus wrote:
> a few questions:
> * is the code still limited to certain combinations of card/chip, card 
> operating system and applet? or did this change expand the support?
>   

It's always the same combination
platform JavaCard 'CosmopolIC v4.X, v5.x' + applet 'AuthentIC v2.2'.


> * is this for new cards only, or will it work with older cards as well?
>   

No support for the new PKI applet 'AuthentIC v3'.
For a moment, I have no specification. This version is not compatible 
with the old one.

> * are there limitation (e.g. old cards yes, but only if blank/whatever ...?)
>   

Delicate question with the cards initialized with the previous OpenSC 
versions.
The previous OpenSC versions were not creating the native Oberthur 
descriptors but the on-card pkcs15 one .
In the new support version the situation is inversed.
If the question will arise, we can slightly change the new init API and 
make possible
the choice between two systems or create the both . Also it's possible 
to supply some tool that converts the on-card pkcs15 descriptors into 
the native ones .


As for the blank cards, there is no needs to deal with them. From one 
side the cards that we have are practically always with the 'securized' 
applet, from the other the Oberthur's PKI applet is more flexible then 
the other ones -- there is no 'private'/'public' space delimitation, 
predefined number and type of the key slots, predefined PIN policy, ...
I know the PKI applets that need all these parameters be defined in the 
applet(s) initialization data.


>> (For a moment 'DATA' objects are not supported in the pkcs15init part --
>> they cannot be created with OpenSC).
>>     
>
> you mean the oberthur driver in opensc doesn't support DATA objects?
> (opensc in general does - pkc15-init --store-data and friends...)
>   

Yes, for a moment. This moment will not be long.

> ok, fine.
>
> Regards, Andrea

Kind wishes,
Viktor.

-- 
Viktor Tarasov  <viktor.tara...@opentrust.com>

_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to