> Le 21/07/2012 06:37, Nguyễn Hồng Quân a écrit : >> So, is there a way to ask for SO PIN via PKCS#11? >> If yes, how should the code of card support be changed? > > I have no solution, > PIN callbacks is not supported by PKCS#11 framework (in the manner as it's > supported by pkcs15-init tool). > PKCS#11 framework do not create slot for SoPIN.
IIRC, C_Login can accept user type CKU_SO to login as admin, the problem might be "what you could do as admin". Probably that depends on the card. In the other hand, PKCS#11 define CKF_PROTECTED_AUTHENTICATION_PATH when "another" login method can be used, like a pinpad, rather than asking the library to authenticate. Maybe this is what you could use to work like a callback (like in CSP), but probably doesnt fit the standard. Anyway, ill be very interested in the future progress you make. _______________________________________________ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel
