Michael Bell wrote:
Eddy Nigg wrote:On 01/21/2009 01:07 PM, Michael Bell:Eddy Nigg wrote:On 01/21/2009 11:57 AM, Michael Bell: Which driver are you using on Linux? Is this an Aladdin eToken? Which library did you choose as the PKCS11 module?I use a Siemens CardOS V4.3B Smartcard. It is a real Smartcard and no USB token.USB tokens are just smart cards with a builtin reader :-) So I may assume that this is an Aladdin smart card then?No, it is a real Siemens card ;)I use the OpenSC PKCS#11 module.Are you using OpenSC also on Windows? Or a driver supplied by the vendor?No, I use the Siemens software on Windows and OpenSC on Linux.
This is probably your difference. The issue could be one of the following: 1) OpenSC is having problems supporting your code. 2) OpenSC is doing something 'out of spec' that is confusing NSS. 3) OpenSC is in spec, but doesn't support a broad enough profile for NSS.4) OpenSC is tripping over a PKCS #11 bug in NSS that other vendors have carefully worked around.
On windows, most smart card vendors test their PKCS #11 modules against one of the NSS apps (old Netscape browsers, Mozilla, Firefox). This means not all bugs in NSS were detected because vendors considered themselves 'done' when they got their modules to work with NSS. So it's not surprising that the Siemens software works.
It would be good to know which one we are dealing with. It's probably 2 or 4 above. I'm particularly interested if it's 4 so I can fix NSS. If it's 2, it would be good to file a bug upstream with openSC.
bob
With OpenSC you need to mark or import the certificate twice for signing and encryption IIRC. Also note that OpenSC isn't compatible with vendor supplied software. Did you try a different driver?The card is produced with the Windows software. "pkcs15-tool -c" from OpenSC on Linux works. Best regards Michael _______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ dev-tech-crypto mailing list dev-tech-crypto@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-tech-crypto
