Hello, Ludovic Rousseau wrote: > Hello, > > Using a normal reader: > $ pkcs11-tool --slot 9 --sign --input-file aa --output-file a > Please enter User PIN: > Using signature algorithm RSA-X-509 > > Using a pinpad reader: > $ pkcs11-tool --slot 1 --sign --input-file aa --output-file a > Using signature algorithm RSA-X-509 > error: PKCS11 function C_SignFinal failed: rv = CKR_USER_NOT_LOGGED_IN (0x101) > > Aborting. > > The PIN is asked on the pinpad. I enter it correctly. > > > I compared both executions at the APDU level. > They both do: > PIN code verify (using APDU or SCardControl) > APDU: 00 A4 00 00 02 3F 00 00 > SW: 6F 0C 84 05 9C AF 0D 00 01 A5 03 88 01 00 90 00 > APDU: 00 A4 00 00 02 50 15 00 > SW: 6F 0F 84 0D A0 00 00 00 63 50 4B 43 53 2D 31 35 01 90 00 > APDU: 00 22 41 B8 07 80 01 80 83 02 01 22 > SW: 69 82 > > After that the pinpad case aborts. But the normal reader does: > APDU: 00 20 00 01 10 30 30 30 30 00 00 00 00 00 00 00 00 00 00 00 00 > SW: 90 00 > Which is new PIN Verify command > > APDU: 00 22 41 B8 07 80 01 80 83 02 01 22 > SW: 90 00 > APDU: 00 2A 86 80 80 31 32 33 34 35 36 37 0A 31 32 33 34 35 36 37 0A > 31 32 33 34 35 36 37 0A 31 32 33 34 35 36 37 0A 31 32 33 34 35 36 37 > 0A 31 32 33 34 35 36 37 0A 31 32 33 34 35 36 37 0A 31 32 33 34 35 36 > 37 0A 31 32 33 34 35 36 37 0A 31 32 33 34 35 36 37 0A 31 32 33 34 35 > 36 37 0A 31 32 33 34 35 36 37 0A 31 32 33 34 35 36 37 0A 31 32 33 34 > 35 36 37 0A 31 32 33 34 35 36 37 0A 31 32 33 34 35 36 37 0A 00 > SW: 17 CE 9B D9 A7 A6 D1 76 EA 21 E0 DD FC F9 AC A7 94 F8 91 4D 76 B8 > 65 CB FE 27 6A C4 E4 31 46 89 D8 EC 90 0D F7 4B 10 27 1A D7 65 F1 BD > 3E B9 63 0A 3D 0D E1 ED CB 87 E5 BC 0C 54 77 CA 0D C4 47 37 DB 20 A0 > 48 E9 B2 5B B0 DD 4A CF EF 11 9F 27 0F 9F 84 93 43 5D D3 BE 44 C7 1F > FA C1 E6 99 52 A4 FD 32 58 07 34 F4 73 09 D0 1A AD 85 8A 2A C6 E2 7A > 89 D5 94 1D 0D 4E 9D C2 2F AB C8 03 CF C5 90 00 > > > I can send an OpenSC log file level=99 (200 KB uncompressed) if needed. > I use the current SVN version of OpenSC. >
Please, do it. > Are the pinpad readers supposed to be supported? > Yes. > Bye > Regards, -- Viktor Tarasov <viktor.tara...@opentrust.com> _______________________________________________ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel
