Am Mittwoch 14 Juli 2010, um 19:41:09 schrieb David Woodhouse:
> On Wed, 2010-07-14 at 20:31 +0300, Martin Paljak wrote:
> > http://pcsclite.alioth.debian.org/unsupported.html#0x05290x0620
> > 
> > It is not supported / only works without a reset.
> 
> Thank you. With 'connect_reset=false' in opensc.conf, I can now run
> 'opensc-tool -a' more than once. However, I don't seem to be able to do
> much *else*...
> 
> [r...@i7 dwmw2]# pkcs15-tool -D
> Using reader with a card: Aladdin eToken PRO USB 72K Java 
...
> Am I just being *completely* stupid?...

eToken 72k are javacard based.
thus you need:
1.) make sure you have a special test/developer edition, where you can
    store your own javacard applet. if not, you have one with the aladdin
    applet on it - which works only with the aladdin software.
 (they make more money by proprietory bundeling token and client software...)
2.) if you have a developer token, you can store an applet on it, that
    opensc supports. once that is done, you can use it with opensc.

the only open source applet opensc supports is the muscle applet,
and its support is not 100% - you can get it to work, but while opensc
supports many different and complex setups with some cards, for muscle
card only a few special setups work and are supported.

the wiki has more information on the musclecard applet (some if it might
be in the "cyberlex" section - cyberflex was the first javacard widely
available, and tools that work with it, should work with all the other
javacards and tokens with javacard inside as well).

yes, the situation is a bit disappointing. every gread card or token
that works great with opensc is no longer sold, outdated, hard to get
etc. (cryptoflex from schlumberger was great, no longer sold.
aladdin etokens 32k/64k were great except for the cardos problems
(secret startkey) - replaced with the java based token. ikey3000 with
starcos was great - never was sold in volume as far as I know (and
most starcos cards or token are not the eraseable "test" edition that
is inside ikey 3000).

we could improve by supporting new cards like acos5 - noone found time
for that so far - or writing/improving the javacards applet and the
driver for them - noone found time for that either.

Regards, Andreas
_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to