Helo, On Apr 17, 2011, at 23:43 , Rien Broekstra wrote: > - The installer puts the registry settings about where to find its > cardprofiles and configfile in an incorrect location: > (HKLM\Software\OpenSC Project\OpenSC (64bit)\ instead of > HKLM\Software\OpenSC Project\OpenSC\), resulting in the tools not being > able to find the profiles and configuration files. Changing the keyname > in the registry to "OpenSC" solves this. Fixed in r5353 [1]
> - Furthermore, using pkcs15-init with more than one -v flag crashes the > tool immediately. > - Also, trying to erase the card with pkcs15-init -E crashes the tool, > regardless wether the card was blank or previously initialized. The > crash seems to happen after the card is erased though, because it is > empty afterwards. This is (s/b)ad and needs debugging. > - Something seems to be off with the location to the pkcs11 dll, because > pkcs11-tool.exe can't load the module unless I explicitly specify its > location (this may be expected behaviour though?): Expected but needs to be fixed ASAP as well. > - Furthermore, when I try to access the card via CSP (EIDAuthenticator) > it is able to find the certificates on the card. However, whenever I try > to login with them it will yield an error that the presented PIN is > incorrect, while I'm sure I entered the correct PIN. A snippet from the > debug log: > > This key cannot be used for decryption: -1209 (Not allowed) When generating the key (and maybe also the certificate) make sure to specify KU decryption --key-usage, -u <arg> Specify X.509 key usage (use "--key-usage help" for more information) > And, lastly, puttysc refuses to accept opensc-pkcs11.dll as a pkcs11 > library. Maybe because puttysc is built for 32bit windows and the > library is 64? Indeed. Acombined installer would be good but this will probably require some work. Meanwhile, both x86 and x64 installers should be able to be installed side by side. Thanks for testing! -- @MartinPaljak.net +3725156495 _______________________________________________ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel
