Hello, Using a normal reader: $ pkcs11-tool --slot 9 --sign --input-file aa --output-file a Please enter User PIN: Using signature algorithm RSA-X-509
Using a pinpad reader: $ pkcs11-tool --slot 1 --sign --input-file aa --output-file a Using signature algorithm RSA-X-509 error: PKCS11 function C_SignFinal failed: rv = CKR_USER_NOT_LOGGED_IN (0x101) Aborting. The PIN is asked on the pinpad. I enter it correctly. I compared both executions at the APDU level. They both do: PIN code verify (using APDU or SCardControl) APDU: 00 A4 00 00 02 3F 00 00 SW: 6F 0C 84 05 9C AF 0D 00 01 A5 03 88 01 00 90 00 APDU: 00 A4 00 00 02 50 15 00 SW: 6F 0F 84 0D A0 00 00 00 63 50 4B 43 53 2D 31 35 01 90 00 APDU: 00 22 41 B8 07 80 01 80 83 02 01 22 SW: 69 82 After that the pinpad case aborts. But the normal reader does: APDU: 00 20 00 01 10 30 30 30 30 00 00 00 00 00 00 00 00 00 00 00 00 SW: 90 00 Which is new PIN Verify command APDU: 00 22 41 B8 07 80 01 80 83 02 01 22 SW: 90 00 APDU: 00 2A 86 80 80 31 32 33 34 35 36 37 0A 31 32 33 34 35 36 37 0A 31 32 33 34 35 36 37 0A 31 32 33 34 35 36 37 0A 31 32 33 34 35 36 37 0A 31 32 33 34 35 36 37 0A 31 32 33 34 35 36 37 0A 31 32 33 34 35 36 37 0A 31 32 33 34 35 36 37 0A 31 32 33 34 35 36 37 0A 31 32 33 34 35 36 37 0A 31 32 33 34 35 36 37 0A 31 32 33 34 35 36 37 0A 31 32 33 34 35 36 37 0A 31 32 33 34 35 36 37 0A 31 32 33 34 35 36 37 0A 00 SW: 17 CE 9B D9 A7 A6 D1 76 EA 21 E0 DD FC F9 AC A7 94 F8 91 4D 76 B8 65 CB FE 27 6A C4 E4 31 46 89 D8 EC 90 0D F7 4B 10 27 1A D7 65 F1 BD 3E B9 63 0A 3D 0D E1 ED CB 87 E5 BC 0C 54 77 CA 0D C4 47 37 DB 20 A0 48 E9 B2 5B B0 DD 4A CF EF 11 9F 27 0F 9F 84 93 43 5D D3 BE 44 C7 1F FA C1 E6 99 52 A4 FD 32 58 07 34 F4 73 09 D0 1A AD 85 8A 2A C6 E2 7A 89 D5 94 1D 0D 4E 9D C2 2F AB C8 03 CF C5 90 00 I can send an OpenSC log file level=99 (200 KB uncompressed) if needed. I use the current SVN version of OpenSC. Are the pinpad readers supposed to be supported? Bye -- Dr. Ludovic Rousseau _______________________________________________ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel
