Re: [opensc-devel] Using engine_pkcs11 with openssl for OCSP

2006-11-17 Thread Peter Stuge
On Thu, Nov 16, 2006 at 01:32:43PM +0100, Jesus Luna wrote: > This HSM in particular (RealSec's CryptoSec at > http://www.realsec.com/esp/servicios/cifrado.html) does not store > private keys, it's only a crypto-accelerator. I don't speak spanish but from the datasheet it looks to me like a tamper

[opensc-devel] Datev Smart Card support added

2006-11-17 Thread Peter Koch
Hi all Daniel Zauft donated a DATEV card (DATEV smartcard classic), so I was able to add support for this kind of preformatted TCOS-card. Please test and let me know whether you were able to use your DATEV card or not. Peter ___

Re: [opensc-devel] opensc broken?

2006-11-17 Thread Thomas Harning Jr.
On Sat, 2006-11-18 at 00:17 +0100, Andreas Jellinghaus wrote: > I'm using openct+opensc+libp11+engine_pkcs11+openss to do this: > create a certificate signed by the smart card. > > with the ubuntu edgy packages this works ok, with all components > current trunk it doesn't work at all: > pkcs15-ini

[opensc-devel] opensc broken?

2006-11-17 Thread Andreas Jellinghaus
I'm using openct+opensc+libp11+engine_pkcs11+openss to do this: create a certificate signed by the smart card. with the ubuntu edgy packages this works ok, with all components current trunk it doesn't work at all: pkcs15-init -ET pkcs15-init -CT -p pkcs15+onepin --label "Andreas Jellinghaus" \

Re: [opensc-devel] Using engine_pkcs11 with openssl for OCSP

2006-11-17 Thread Nils Larsch
Jesus Luna wrote: ... This HSM in particular (RealSec's CryptoSec at http://www.realsec.com/esp/servicios/cifrado.html) does not store private keys, it's only a crypto-accelerator. how is this supposed to work ? pkcs11 expects the keys to be present on token (or within the library) when a sign

Re: [opensc-devel] converting .p15 files to X.509 or .p12

2006-11-17 Thread Nils Larsch
John T. Guthrie III wrote: Hello all, The following may sound like a rather strange question. First a bit of background. The company that I work for recently acquired some APC 7931 power distribution units. These PDUs are quite nice for what they do, and they are quite nicely managable. Howe

Re: [opensc-devel] converting .p15 files to X.509 or .p12

2006-11-17 Thread Chaskiel M Grundman
pkcs15 does define file formats (for smart cards that use "transparent" files), but "a file in PKCS #15 format" is nonsensical. At the very least, there are multiple file formats depending on what sort of data you are storing. A first step in figuring out what these files are is determining if

Re: [opensc-devel] converting .p15 files to X.509 or .p12

2006-11-17 Thread Peter Stuge
On Fri, Nov 17, 2006 at 02:54:12PM -0500, John T. Guthrie III wrote: > Does anyone on this list know of a way to convert between > X.509/PKCS #12 data and PKCS #15 data without using a smart card? Perhaps the easiest thing would be a card driver that works on flat files.. //Peter ___

[opensc-devel] converting .p15 files to X.509 or .p12

2006-11-17 Thread John T. Guthrie III
Hello all, The following may sound like a rather strange question. First a bit of background. The company that I work for recently acquired some APC 7931 power distribution units. These PDUs are quite nice for what they do, and they are quite nicely managable. However, in order to put keys an

Re: [opensc-devel] Pinpad again

2006-11-17 Thread Peter Stuge
On Fri, Nov 17, 2006 at 02:47:31PM +0100, Ludovic Rousseau wrote: > I don't know if pam_pkcs11 can know: > - that a PIN pad is connected > - that the PKCS#11 lib will/can use the PIN pad so the PAM module do > not have to ask for a PIN on the keyboard. Supposedly, it can. CKF_PROTECTED_AUTHENTICA

Re: [opensc-devel] opensc code warning in card-flex.c

2006-11-17 Thread Chaskiel M Grundman
--On Friday, November 17, 2006 10:38:34 AM +0100 Andreas Jellinghaus <[EMAIL PROTECTED]> wrote: no idea what the code meant to do, so not sure if this is a bug / how to fix it. maybe someone can have a look? Lose the '*'. Change it to just p++; or, remove the statement entirely, and put the

Re: [opensc-devel] Pinpad again

2006-11-17 Thread Ludovic Rousseau
On 17/11/06, Jonsito <[EMAIL PROTECTED]> wrote: El vie, 17-11-2006 a las 14:47 +0100, Ludovic Rousseau escribió: - that the PKCS#11 lib will/can use the PIN pad so the PAM module do not have to ask for a PIN on the keyboard. I ask pin/password by mean of pam libraries. so no control on where pam

Re: [opensc-devel] opensc code warning in card-flex.c

2006-11-17 Thread Ludovic Rousseau
On 17/11/06, Andreas Jellinghaus <[EMAIL PROTECTED]> wrote: card-flex.c: In function 'cyberflex_process_file_attrs': card-flex.c:419: warning: value computed is not used no idea what the code meant to do, so not sure if this is a bug / how to fix it. maybe someone can have a look? It looks lik

Re: [opensc-devel] Pinpad again

2006-11-17 Thread Jonsito
El vie, 17-11-2006 a las 14:47 +0100, Ludovic Rousseau escribió: I don't know if pam_pkcs11 can know: - that a PIN pad is connected Sure no, unless pkcs11 interface could inform us that pinpad is attached. Anyway this issue is not handled by my code - that the PKCS#11 lib will/can use the PIN pa

Re: [opensc-devel] Pinpad again

2006-11-17 Thread Ludovic Rousseau
On 17/11/06, Johannes Becker <[EMAIL PROTECTED]> wrote: > As Martin said we should correct this. So if you can show us a PAM > module that does not prompt for PIN that would help. Well, nearly every other pam module has to get the password via the keyboard and prompts for it. The only exception

[opensc-devel] opensc code warning in card-flex.c

2006-11-17 Thread Andreas Jellinghaus
card-flex.c: In function 'cyberflex_process_file_attrs': card-flex.c:419: warning: value computed is not used no idea what the code meant to do, so not sure if this is a bug / how to fix it. maybe someone can have a look? Andreas ___ opensc-devel maili

Re: [opensc-devel] Pinpad again

2006-11-17 Thread Johannes Becker
Hello, Am Donnerstag, 16. November 2006 14:59 schrieb Ludovic Rousseau: > > What do you use for the authentication in this precise case? Do you > use a PAM module? Which one? /usr/local/lib/security/pam_pkcs11.so I compiled pam_pkcs11-0.5.3 > As Martin said we should correct this. So if you ca