[opensc-devel] Some results with the Muscle cardlet

2010-12-03 Thread gilles Bernabé
Hello, I was trying OpenSC version 0.12.0-svn with Muscle cardlet, in order to verify its compatibility with TLS and client authentication on a web site. Finally I've been able to make an authentication but it's a little bit "tricky", I found this method completely by chance, the only way to make

Re: [opensc-devel] PKCS#15 ObjectValue

2010-12-03 Thread Douglas E. Engert
Andre, Now that I have had a few days to look over your approach, it has some merit. The main issues are: No one appears to have a card that supports EC and PKCS#15. This complicates testing. The Latest official RSA PKCS#15 documents that deals with EC appear to be from 2000, and is very

Re: [opensc-devel] r4904 and OpenSSL-1.0.0b in Fedora 14

2010-12-03 Thread Douglas E. Engert
Ok commited this fix. Thanks. On 12/3/2010 9:34 AM, jons...@terra.es wrote: > > > Mensaje original > De: deeng...@anl.gov > Fecha: 03/12/2010 16:18 > Para: > Asunto: Re: [opensc-devel] r4904 and OpenSSL-1.0.0b in Fedora 14 > > Commited r4906 to test for OPENSSL_NO_EC, and opensslconf.h i

Re: [opensc-devel] r4904 and OpenSSL-1.0.0b in Fedora 14

2010-12-03 Thread jons...@terra.es
Mensaje original De: deeng...@anl.gov Fecha: 03/12/2010 16:18 Para: Asunto: Re: [opensc-devel] r4904 and OpenSSL-1.0.0b in Fedora 14 Commited r4906 to test for OPENSSL_NO_EC, and opensslconf.h is included. Please verify id Fedora now compiles. Just a simple patch to get it right: ---

Re: [opensc-devel] r4904 and OpenSSL-1.0.0b in Fedora 14

2010-12-03 Thread Douglas E. Engert
Commited r4906 to test for OPENSSL_NO_EC, and opensslconf.h is included. Please verify id Fedora now compiles. On 12/3/2010 5:46 AM, Aleksey Samsonov wrote: > Hello, > > One remark. We need use 'include' for use > OPENSSL_NO_EC. > > Сomplete example (or see src/pkcs11/openssl.c): > > #include /

Re: [opensc-devel] r4904 and OpenSSL-1.0.0b in Fedora 14

2010-12-03 Thread Douglas E. Engert
I have a patch, will commit it now. On 12/3/2010 2:48 AM, Martin Paljak wrote: > > On Dec 3, 2010, at 10:16 AM, jons...@terra.es wrote: > >> In Fedora 14 (that ships OpenSSL-1.0.0b) seems that EC support is not built >> in OpenSSL package >> >> - >> Making all in tools >> mak

Re: [opensc-devel] r4904 and OpenSSL-1.0.0b in Fedora 14

2010-12-03 Thread Aleksey Samsonov
Hello, One remark. We need use 'include ' for use OPENSSL_NO_EC. Сomplete example (or see src/pkcs11/openssl.c): #include /* for OPENSSL_VERSION_NUMBER */ #if OPENSSL_VERSION_NUMBER >= 0x1000L #include #include /* for OPENSSL_NO_* */ #ifndef OPENSSL_NO_EC #include #endif /* OPENSSL_NO_EC

Re: [opensc-devel] r4904 and OpenSSL-1.0.0b in Fedora 14

2010-12-03 Thread jons...@terra.es
Mensaje original De: mar...@paljak.pri.ee Fecha: 03/12/2010 9:48 Para: CC: Asunto: Re: [opensc-devel] r4904 and OpenSSL-1.0.0b in Fedora 14 > OPENSSL_VERSION_NUMBER >= 0x1000L && !defined(OPENSSL_NO_EC) is > the key, > Douglas hopefully plans that into the next patch unless

Re: [opensc-devel] r4904 and OpenSSL-1.0.0b in Fedora 14

2010-12-03 Thread Martin Paljak
On Dec 3, 2010, at 10:16 AM, jons...@terra.es wrote: > In Fedora 14 (that ships OpenSSL-1.0.0b) seems that EC support is not built > in OpenSSL package > > - > Making all in tools > make[3]: se ingresa al directorio > `/home/jantonio/work/dnie/cenatic/opendnie/opensc-dnie/

[opensc-devel] Rv: r4904 and OpenSSL-1.0.0b in Fedora 14

2010-12-03 Thread jons...@terra.es
More info: Seems that Fedora removes all ECC related issues due to patents problems: https://bugzilla.redhat.com/show_bug.cgi?id=615372 ¿How these problems could affect OpenSC? Perhaps we could do some kind of conditional compilation to take care on this Juan Antonio _

[opensc-devel] r4904 and OpenSSL-1.0.0b in Fedora 14

2010-12-03 Thread jons...@terra.es
In Fedora 14 (that ships OpenSSL-1.0.0b) seems that EC support is not built in OpenSSL package - Making all in tools make[3]: se ingresa al directorio `/home/jantonio/work/dnie/cenatic/opendnie/opensc-dnie/trunk/src/tools' gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src -pth