Dear Kerstin, today I have tried to reproduce to behaviour you described. But the result is, that everything works fine when using opensc release 0.11.13. I have CardOS 4.3b in use and the properties of my keys are as follows:
Private Key Object; RSA Usage: decrypt, sign, unwrap Public Key Object; RSA 2048 bits Usage: encrypt, verify, wrap Best Regards, Andre Zepezauer On Thu, 2010-06-10 at 13:58 +0200, kerstin.ho...@uv.ruhr-uni-bochum.de wrote: > Hi, > > I am working on the SSO- and Signature-Framework at the Ruhr Universität. We > recently tried to upgrade to version 0.11.13 but encountered some problems > with the apdus sent for digital signature operations. CardOS 4.3 cards > provide two commands for the same functionality, PSO_ CDS and PSO_DEC. > Unfortunately in CardOS the usage of the commands depends on the signature > object created on the card. The cards of Ruhr-Universität Bochum need PSO_DEC > (the Siemens approach for key objects that sign and decipher). > Some changes in OpenSC version 0.11.12 resulted in choosing the PSO_ CDS > command instead of PSO_DEC for our cards. > > There has already been a posting by Andreas Jellinghaus at 12.March 2010, > "removing --split-key, using decrypt() for signing keys with usage > sign, decrypt on cardos". > I think the proposed solution should fix the issue. > > The last version that works with the cards of Ruhr-Universität Bochum on OS > Windows is 0.11.11. > > > Best Regards > Kerstin > > > -----Original Message----- > From: opensc-devel-boun...@lists.opensc-project.org > [mailto:opensc-devel-boun...@lists.opensc-project.org] On Behalf Of Johannes > Becker > Sent: Wednesday, June 09, 2010 12:42 PM > To: opensc-de...@opensc-project.org > Subject: [opensc-devel] CardOS 4.3 > > Hello, > > I got a card for testing purposes from the Ruhr-Universität Bochum. > It works with Windows, the newest Firefox and opensc-pkcs11.dll from good old > smart card bundle. (opensc 0.11.4). > > It doesn't work on Debian Linux Testing (opensc 0.11.13-1). > > My impression is, that the problem is not the operating system but the > opensc version. (I will test that later). > > How to get it working with a newer opensc? > > Regards > Johannes > > > Here the output of cardos-info : > > C:\Programme\Smart card bundle>cardos-info > 3b:f2:18:00:02:c1:0a:31:fe:58:c8:08:74 > Info : CardOS V4.3B (C) Siemens AG 1994-2004 > Chip type: 123 > Serial number: 29 85 4d 0a 0d 30 > Full prom dump: > 33 66 00 40 EB EB EB EB 7B FF 29 85 4D 0A 0D 30 3...@....{.).M..0 > 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ................ > OS Version: 200.8 (that's CardOS M4.3b) > Current life cycle: 32 (administration) > Security Status of current DF: > 01 . > Free memory : 954 > ATR Status: 0x0 ROM-ATR > Packages installed: > Ram size: 4, Eeprom size: 32, cpu type: 66, chip config: 63 > Free eeprom memory: 20478 > System keys: PackageLoadKey (version 0x00, retries 10) > System keys: StartKey (version 0xff, retries 10) > Path to current DF: > > _______________________________________________ > opensc-devel mailing list > opensc-devel@lists.opensc-project.org > http://www.opensc-project.org/mailman/listinfo/opensc-devel > _______________________________________________ > opensc-devel mailing list > opensc-devel@lists.opensc-project.org > http://www.opensc-project.org/mailman/listinfo/opensc-devel _______________________________________________ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel
