Hi Hans,
On 31/05/16 11:40, j.witvl...@mindef.nl wrote:
Retrying, It seems my appended log was too long.
Hi all,
Has anyone positive experience with ${SUBJECT} ?
Just been googling, from the 6190 results, they can be split up into:
A)Countless times the the manpage or howto, simpy saying:
“pkcs11-protected-authentication [0|1]...
Use PKCS#11 protected authentication path, useful for biometric and
external keypad devices. Every provider has its own setting.”
B)Snapshots from the cookbook from JJK
C)Mail-exchange from Alon, indicating his problem with this option in
2.1-beta4
D)Likewise remarks..
On a German page (
http://wiki.lug-balista.de/doku.php/balista:archiv:sammlung_agt:smartcardsundlinux
)
I read
…
für die Nutzung von PinPad-Readern muss nur eine Zeile in die
conf-Datei eingefügt werden (nach pkcs11-provider):
pkcs11-protected-authentication 1 /usr/lib/onepin-opensc-pkcs11.so
dann wird automatisch das PinPad zur Eingabe benutzt, wenn es in der
opensc.conf aktiviert ist.
….
So it looks like this option needs a third parameter, mainly the
pkcs-provider-lib
Needless to say thatin my case:
-The smartcard does work properly in a ordinary cardreader,
-That card and pinpad-reader work as expected with other application
(screenlock and pkcs11-tools)
So did anyone manage to get PINPAD readers working with openvpn?I
could not find any success story so-far…
I've delved into this a bit - and no I don't have a device requiring
protected auth so I cannot say that I have either positive or negative
experience with this.
However, when I read the sources for pkcs11-helper and libp11 then I'm
gettting the feeling that these libraries do not properly support it
(whereas opensc does).
Did you manage to dig up a working example based on pkcs11-helper with
your smartcard?
cheers,
JJK
------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users
