Re: [opensc-devel] 'Sign by Decryption' and CardOS

2010-09-17 Thread Viktor TARASOV
Hello Andre, Andre Zepezauer wrote: >>> Besides the sigh_with_decipher hack there is another problem which >>> arises when on card pkcs15 structure states only one operation per key. >>> >>> >> It's the subject of the next enhancement. >> I suggest something like >> http://www.opensc-pro

Re: [opensc-devel] use algorithm_ref in set_security_env

2010-09-17 Thread Viktor TARASOV
Andre Zepezauer wrote: > On Tue, 2010-08-31 at 10:14 +0200, Viktor TARASOV wrote: > >> Andre Zepezauer wrote: >> >>> On Mon, 2010-08-30 at 17:50 +0200, Viktor TARASOV wrote: >>> >>> Hello, Andre Zepezauer wrote: > Hello, > >

Re: [opensc-devel] 'Sign by Decryption' and CardOS

2010-09-17 Thread Andre Zepezauer
Hello Viktor, > Andre Zepezauer wrote: > >>> Besides the sigh_with_decipher hack there is another problem which > >>> arises when on card pkcs15 structure states only one operation per key. > >>> > >>> > >> It's the subject of the next enhancement. > >> I suggest something like > >> http

[opensc-devel] Pb cross building after Changeset 4709 for trunk/configure.ac

2010-09-17 Thread francois . leblanc
Hello Since Changeset 4709 for trunk/configure.ac I can't anymore cross building opensc, I use to configure with --disable-pcsc under linux and produce opensc-0-X-X.tar.gz to cross build. Now if I run configure --disable-pcsc I got: configure: error: Only one of --enable-pcsc, --enable-ope

Re: [opensc-devel] 'Sign by Decryption' and CardOS

2010-09-17 Thread Viktor TARASOV
Andre Zepezauer wrote: > Hello Viktor, > > >> Andre Zepezauer wrote: >> > Besides the sigh_with_decipher hack there is another problem which > arises when on card pkcs15 structure states only one operation per key. > > > It's the subject of the

Re: [opensc-devel] Call for testing of the upcoming 0.12.0 release / ignored_readers

2010-09-17 Thread Johannes Becker
Hello, it took me some time to reproduce the already described bug: "After some idle time the browser seems to forget completely about the chip card. If you request an encrypted web page, a ssl handshake error is displayed." This happens, if you use "ignored_readers" in opensc.conf. In my examp

Re: [opensc-devel] use algorithm_ref in set_security_env

2010-09-17 Thread Andre Zepezauer
On Fri, 2010-09-17 at 10:02 +0200, Viktor TARASOV wrote: > Andre Zepezauer wrote: > > On Tue, 2010-08-31 at 10:14 +0200, Viktor TARASOV wrote: > > > >> Andre Zepezauer wrote: > >> > >>> On Mon, 2010-08-30 at 17:50 +0200, Viktor TARASOV wrote: > >>> > >>> > Hello, > > >>>

Re: [opensc-devel] 'Sign by Decryption' and CardOS

2010-09-17 Thread Andre Zepezauer
On Fri, 2010-09-17 at 10:20 +0200, Viktor TARASOV wrote: > Andre Zepezauer wrote: > > Hello Viktor, > > > > > >> Andre Zepezauer wrote: > >> > > Besides the sigh_with_decipher hack there is another problem which > > arises when on card pkcs15 structure states only one operation per

Re: [opensc-devel] FOSDEM 2011: february 5th and 6th

2010-09-17 Thread Jean-Michel Pouré - GOOZE
Le vendredi 17 septembre 2010 à 00:15 +0200, Peter Koch a écrit : > You can count on me too. Cool. > Should we get a booth like we did on LinuxTag 2006 [1] ? > [1] > http://www.opensc-project.org/opensc/wiki/ProjectHistory#LinuxTag2006 I would very much like to and I can stay all time on the boot

Re: [opensc-devel] FOSDEM 2011: february 5th and 6th

2010-09-17 Thread Martin Paljak
Hello, An introduction on how hardware security devices improve the situation and how smart cards and tokens are the cheapest and thus most available key containers. As more and more people have eID cards and there are both services (online) and applications (ssh) that can make use of them, eID

Re: [opensc-devel] Call for testing of the upcoming 0.12.0 release

2010-09-17 Thread Martin Paljak
Hello, On Sep 17, 2010, at 1:02 AM, Peter Koch wrote: > TCOS-cards have 4 PINs, i.e. PIN, PUK, PIN1 and PIN2. If PIN is blocked it > may by unblocked by PUK. If PIN1 or PIN2 are blocked they may be unblocked by > PIN. So PIN is both a regular PIN (i.e. protects certain objects) and an > unblocki

Re: [opensc-devel] Pb cross building after Changeset 4709 for trunk/configure.ac

2010-09-17 Thread Martin Paljak
On Sep 17, 2010, at 11:04 AM, francois.lebl...@cev-sa.com wrote: > I use to configure with --disable-pcsc under linux and produce > opensc-0-X-X.tar.gz Just install libpcsclite-dev or the equivalent for your Linux distribution. Or use --enable-ctapi --disable-pcsc and then make dist to get a ta

[opensc-devel] [RFC] Proposal For Restructuring 'struct sc_pkcs15_card'

2010-09-17 Thread Andre Zepezauer
Dear opensc developers, I would like to propose the following simplification of the internal 'struct sc_pkcs15_card'. typedef struct sc_pkcs15_card { sc_card_t *card; unsigned int flags; unsigned int magic; unsigned int pin_cache_counter; sc_file_t *fil

Re: [opensc-devel] [RFC] Proposal For Restructuring 'struct sc_pkcs15_card'

2010-09-17 Thread Martin Paljak
Hello, Nice! (Comments inline) On Sep 17, 2010, at 3:03 PM, Andre Zepezauer wrote: > I would like to propose the following simplification of the internal > 'struct sc_pkcs15_card'. ... > The main difference to the current definition is, that everything that > belongs to tokeninfo would be accessi

Re: [opensc-devel] Pb cross building after Changeset 4709 for trunk/configure.ac

2010-09-17 Thread francois . leblanc
>> I use to configure with --disable-pcsc under linux and produce opensc-0-X-X.tar.gz >Just install libpcsclite-dev or the equivalent for your Linux distribution. Ok works fine, Thank you Martin. Regards François. ___ opensc-devel mailing list opens

Re: [opensc-devel] 'Sign by Decryption' and CardOS

2010-09-17 Thread Viktor TARASOV
Ludovic Rousseau wrote: > 2010/9/17 Andre Zepezauer : > >> On Thu, 2010-09-16 at 19:21 +0200, Viktor TARASOV wrote: >> > > >>> PSO_DEC do not support the chaining and to perform decryption with >>> RSA2_PURE 2048bits the support of extended APDUs is needed. >>> For a while it do not work

Re: [opensc-devel] 'Sign by Decryption' and CardOS

2010-09-17 Thread Viktor TARASOV
Andre Zepezauer wrote: > On Thu, 2010-09-16 at 19:21 +0200, Viktor TARASOV wrote: > >> Hello Andre, >> >> Andre Zepezauer wrote: >> >>> Hello Viktor, >>> >>> there are two distinct properties of CardOS, which I belief you have >>> mixed. On key generation time one has to decide: >>> >>> 1.

Re: [opensc-devel] FOSDEM 2011: february 5th and 6th

2010-09-17 Thread Peter Stuge
Martin Paljak wrote: > An introduction on how hardware security devices improve the > situation and how smart cards and tokens are the cheapest and thus > most available key containers. In my experience this kind of info is not distributed so efficiently in a booth. I am not arguing against a boot

Re: [opensc-devel] FOSDEM 2011: february 5th and 6th

2010-09-17 Thread Martin Paljak
Hello, On Sep 17, 2010, at 11:00 PM, Peter Stuge wrote: >> An introduction on how hardware security devices improve the >> situation and how smart cards and tokens are the cheapest and thus >> most available key containers. > > In my experience this kind of info is not distributed so efficiently >