Re: [opensc-devel] send_size and apdu chaining fix

2010-02-04 Thread Andreas Jellinghaus
Thanks Douglas, I applied your patch to trunk. Thanks again Mats for reporting the issue and sending the patch. Regards, Andreas Am Donnerstag 04 Februar 2010 23:44:36 schrieb Douglas E. Engert: > On December 17, Mats Andersson sent in a patch for apdu chaining, > and I responded that this might

Re: [opensc-devel] send_size and apdu chaining fix

2010-02-04 Thread Douglas E. Engert
On December 17, Mats Andersson sent in a patch for apdu chaining, and I responded that this might cause a problem with the card-piv driver. I am attaching a patch that removes the restrictions for card-piv.c and piv-tool.c. His patch to adpu.c is also included. This patch is against svn revision

Re: [opensc-devel] serial number of USB smart card adapters

2010-02-04 Thread Crypto Stick
> What is the problem you are facing with serial numbers? The usage of individual Crypto Sticks and thus of their users could be monitored. This could be problematic in environments where government does not allow free speech for example. In such situations users of cryptographic mechanisms may fa

Re: [opensc-devel] Problems developing with Starcos 2.3

2010-02-04 Thread Andreas Jellinghaus
Hi Fernando, your problem is this: starcos_ops.delete_file = NULL; the starcos driver does not implement delete file. I'm not sure of the details, maybe it is a limitation of the card (i.e. starcos does not offer any way to delete files). not 100% sure. it could also be that the driver a

Re: [opensc-devel] replace getpass?

2010-02-04 Thread Jim Rees
Andreas Jellinghaus wrote: man getpass: This function is obsolete. Do not use it. also this function reads from /dev/tty. why? So you can do things like this: mcrypt foo and have it read the password from your terminal rather than from the file foo.nc. One of the reasons it was

Re: [opensc-devel] serial number of USB smart card adapters

2010-02-04 Thread Ludovic Rousseau
2010/2/3 Crypto Stick : > Hi! > We are developing an Open Source security token (based on the OpenPGP > Card) which works as a smart card adapter. ( > https://www.privacyfoundation.de/crypto_stick/ ) > > We discovered that Windows seems to cache each USB smart card adapter > (probably each USB devi

Re: [opensc-devel] Regression test in src/tests/regression

2010-02-04 Thread Andreas Jellinghaus
Am Donnerstag 04 Februar 2010 08:04:07 schrieb Jean-Michel Pouré: > Dear friends, > > Would it be possible to discuss about regression tests. I would like to > review these tests to certify a number of cards. > > On my system, regression test fail during erase because pkcs15-init -E > may return

Re: [opensc-devel] opensc-pkcs11.so displaying certs differently?since opensc 0.11.10?

2010-02-04 Thread Andreas Jellinghaus
Am Donnerstag 04 Februar 2010 10:20:37 schrieb Christian Horn: > On Thu, Feb 04, 2010 at 10:01:43AM +0100, Andreas Jellinghaus wrote: > > chistian: you could post a "pkcs15-tool --dump" to show in detail > > how the card looks like. > > http://fluxcoil.net/files/openscdebug/pkcs15-tool_dump_ok > T

Re: [opensc-devel] Regression test in src/tests/regression

2010-02-04 Thread Jean-Michel Pouré
Le jeudi 04 février 2010 à 11:18 +0100, Viktor TARASOV a écrit : > > Thanks to point it out, I'll look as soon as possible. > What type of the cards that you are using? I am using a Feitian PKI card. I wrote you with my details if you need a free Feitian PKI card. Kind regards, Jean-Michel ___

Re: [opensc-devel] Regression test in src/tests/regression

2010-02-04 Thread Viktor TARASOV
Jean-Michel Pouré wrote: > Dear friends, > > Would it be possible to discuss about regression tests. I would like to > review these tests to certify a number of cards. > > On my system, regression test fail during erase because pkcs15-init -E > may return messages and fail. > > In particular, runn

[opensc-devel] Regression test in src/tests/regression

2010-02-04 Thread Jean-Michel Pouré
Dear friends, Would it be possible to discuss about regression tests. I would like to review these tests to certify a number of cards. On my system, regression test fail during erase because pkcs15-init -E may return messages and fail. In particular, running pkcs15-init twice fails: http://www.

Re: [opensc-devel] Add card minidriver base on trunk.

2010-02-04 Thread François Leblanc
>> Ok, to be more clear I suggest "opensc-cardmod.dll"... > >good idea. Thank you. >> Yes dlls must be in Path, the Path can be update at install process. > >I know you can set the path for users. but can you also set the >path for system processes (e.g. the login window)? Oups sorry, of cour

Re: [opensc-devel] opensc-pkcs11.so displaying certs differently?since opensc 0.11.10?

2010-02-04 Thread Christian Horn
On Thu, Feb 04, 2010 at 10:01:43AM +0100, Andreas Jellinghaus wrote: > > chistian: you could post a "pkcs15-tool --dump" to show in detail > how the card looks like. http://fluxcoil.net/files/openscdebug/pkcs15-tool_dump_ok That output is the same for working/nonworking opensc revision. Also the

Re: [opensc-devel] replace getpass?

2010-02-04 Thread Andreas Jellinghaus
Am Donnerstag 04 Februar 2010 09:35:14 schrieb Peter Stuge: > Andreas Jellinghaus wrote: > > windows has no termios, so I can #ifdef out those parts and it will > > do what common_getpass does - the user enters a password, but the > > characters are not hidden. > > OpenSSL has solved this on Windo

Re: [opensc-devel] Add card minidriver base on trunk.

2010-02-04 Thread Andreas Jellinghaus
Am Donnerstag 04 Februar 2010 08:38:31 schrieb François Leblanc: > Ok, to be more clear I suggest "opensc-cardmod.dll"... good idea. > Yes dlls must be in Path, the Path can be update at install process. I know you can set the path for users. but can you also set the path for system processes (e

Re: [opensc-devel] opensc-pkcs11.so displaying certs differently since opensc 0.11.10?

2010-02-04 Thread Andreas Jellinghaus
Peter, you know the tcos emulation best, any idea what is happening there? Pierre, any idea how the new code will react to such strange situations? christians tcos card has several certificates with the same ID - at least with the old code. with the new one only one is found. no idea why. chistia

Re: [opensc-devel] replace getpass?

2010-02-04 Thread Peter Stuge
Andreas Jellinghaus wrote: > windows has no termios, so I can #ifdef out those parts and it will > do what common_getpass does - the user enters a password, but the > characters are not hidden. OpenSSL has solved this on Windows. Does anyone know how? //Peter

Re: [opensc-devel] serial number of USB smart card adapters

2010-02-04 Thread Peter Stuge
Crypto Stick wrote: > over time on Windows this might result in a lot of cached > information for each time the (same) stick is connected. We > should investigate this caching mechanism further. What is the problem you are facing with serial numbers? //Peter _

Re: [opensc-devel] [opensc-commits] svn opensc changed[3994] fold ui.c/h into pkcs15-init.

2010-02-04 Thread Andreas Jellinghaus
Am Donnerstag 04 Februar 2010 07:42:52 schrieb Martin Paljak: > On Feb 4, 2010, at 08:33 , webmas...@opensc-project.org wrote: > > Revision: 3994 > > Author: aj > > Date: 2010-02-04 06:33:33 + (Thu, 04 Feb 2010) > > > > Log Message: > > --- > > fold ui.c/h into pkcs15-init. > > S

Re: [opensc-devel] replace getpass?

2010-02-04 Thread Alon Bar-Lev
No objection :) Just make it work for Windows as well. On Thu, Feb 4, 2010 at 10:08 AM, Andreas Jellinghaus wrote: > Am Donnerstag 04 Februar 2010 08:55:45 schrieb Alon Bar-Lev: >> Won't work for Windows, you need to handle this and none interactive >> run as well. > what is "this"? windows has

Re: [opensc-devel] replace getpass?

2010-02-04 Thread Andreas Jellinghaus
Am Donnerstag 04 Februar 2010 08:55:45 schrieb Alon Bar-Lev: > Won't work for Windows, you need to handle this and none interactive > run as well. what is "this"? windows has no termios, so I can #ifdef out those parts and it will do what common_getpass does - the user enters a password, but the ch