logo       

PIN pad support for Kobil Kaan Pro?: msg#00233

encryption.opensc.devel

Subject: PIN pad support for Kobil Kaan Pro?

Hi,

the Oberthur AuthentIC card is now working nicely with
2048 bit RSA keys in conjuction with a Kobil Kaan Pro reader.
My application is Linux strongSwan which starting with
version 2.4.1 comes with a PKCS #11 interface.

In openct-0.5.0 I had to increase the size of the replybuf[]
in ifd/process.c from 256 bytes up to 258 bytes in order to
accommodate the response containing the 2048 bit signature plus
the SW1/SW2 bytes. Later on I saw that openct-0.6.2 has already
fixed this bug :-( Thus I switched to openct-0.6.2. Unfortunately
I'm getting now the following harrassing debug messages when
executing command line tools like pkcs15-tool or pkcs11-tool:

Debug: connect() failed: Connection refused
Debug: connect() failed: No such file or directory
Debug: connect() failed: No such file or directory
Debug: connect() failed: No such file or directory
Debug: connect() failed: Connection refused
...

The commands work but the debug output is a nuisance.
What is the reason for this and how can it be stopped?
Apparently this has something to do with the socket interface
of the ifdhandler process.

Another question: How can I activate the PIN pad
interface of the Kobil Kaan Pro? The documentation
says to enter a null PIN. But when I execute the command

pkcs11-tool --login --test

I get the error

sec.c:201:sc_pin_cmd: Use of pin pad not supported by card driver
sec.c:204:sc_pin_cmd: returning with: Not supported
error: PKCS11 function C_Login failed:
rv = CKR_FUNCTION_NOT_SUPPORTED (0x54)

Keep up your great work with opensc/openct!

Andreas

=======================================================================
Andreas Steffen e-mail: andreas.steffen@xxxxxxxxxxxxx
strongSec GmbH home: http://www.strongsec.com
Alter Zürichweg 20 phone: +41 1 730 80 64
CH-8952 Schlieren (Switzerland) fax: +41 1 730 80 65
==========================================[strong internet security]===


<Prev in Thread] Current Thread [Next in Thread>
Google Custom Search

News | FAQ | advertise