Jean-Michel Pouré - GOOZE wrote: > Daer Jan, > > >> recently I bought a Feitian ePAss + SCR301 card + cardreader from gooze >> and I've been struggling with it ever since. >> > > To date, we don't sell ePass sticks and you probably did not get it from > us. > err, I don't recall the official name of the Feitian card then that you sent me; it's the one based on the entersafe card. > >> The gooze tutorial suggests to use the pcsc driver so I grabbed >> pcsc-lite-1.5.6-svn-4874 and ccid-1.3.11-svn-4874 from Ludovic's site >> and compiled them; with a little bit of effort I can now use the pcsc >> driver to access the Feitian card: >> > > Gooze tutorials suggest you should never use OpenCT and OpenSC+libccid > at the same time. Because ftsafe driver was added recently, recent fixes > are in OpenSC svn. > Initial tests were done with opensc+openct only (ccid and pcscd disabled). After I grabbed the SVN versionof pcscd+ccid I changed opensc to use *only* the pcsc driver.
> >> - initializing the card works >> - storing a private key and certificate works >> - generating a 1024 bit rsa onboard works >> - generating a 2048 bit rsa onboard now works - good! >> but signing a certificate request using the card still fails (error -1200). >> > > The problem is probably OpenSC compatibility with OpenSSL. > I will test it with openssl 0.9.8 next week > >> Does anybody have any clues what to try next? Otherwise I'd have to >> declare the Feitian card useless for my purposes... >> > > I am sending you today a free CCID reader, so you can compare results. > > Please leave the OpenSC and Feitian folks some time to analyze your > problem. Make sure that we will enquire. I am passing the information to > a Feitian consultant. > > Excellent! I will test the CCID reader when I get it. If there are other things that I can test/debug please let me know. The "turn-around time" might be a few days but I'm definitely interested in getting this card to work, More information for the Feitian folks: I also tried the driver bundle from the ftsafe website but it only supports the SCR200 card reader, not the 301 ; what was/am I doing wrong there? Thanks, JJK / Jan Just Keijser _______________________________________________ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel
