opensc reports reader and card, pkcs11 doesn't in Windows XP

Thread: opensc reports reader and card, pkcs11 doesn't in Windows XP

Search this list only Search all lists
opensc reports reader and card, pkcs11 doesn't in Windows XP
	2007-05-07 08:43:23

Dear, In linux my Starcos smartcard is working fine. I was able to put the required keys and certificates on it with pkcs15-init. Using it to authenticate is also working fine. To get it working, I had to put the line "force_card_driver = starcos;" in the opensc.conf file as the smartcard is not recognized automatically. In Windows XP though, the smartcard is listed by the opensc-tool and also accessible via "opensc-explorer -r 1" but the pkcs11-tool can't find it and pkcs15-tool reports it as unsupported card. It seems that the option "-r 1" is needed but it can't be set with pkcs11-tool. Can you advice me what to do so that pkcs11-tool would recognize the card (token) and get the installad certificate out of it. Thanks, Thierry hereunder the output of some commands: c:Program FilesSmart card bundle>opensc-tool -l 0 pcsc O2Micro PCMCIA Reader 0 1 pcsc OMNIKEY Cardman 6121 0 c:Program FilesSmart card bundle>opensc-tool -R pcsc PC/SC reader ctapi CT-API module C:Program FilesSmart card bundle>opensc-tool -nv -r 1 Connecting to card in reader OMNIKEY CardMan 6121 0... Using card driver STARCOS SPK 2.3. Card name: STARCOS SPK 2.3 C:Program FilesSmart card bundle>opensc-tool -a -r 1 3b:b7:18:00:c0:3e:31:fe:65:53:50:4b:32:34:90:00:25 C:Program FilesSmart card bundle>pkcs11-tool -L unable to enumerate apps: Wrong length pkcs15.c:711:sc_pkcs15_bind: returning with: Unsupported card Available slots: Slot 0 (empty) Slot 1 (empty) Slot 2 (empty) Slot 3 (empty) Slot 4 (empty) Slot 5 (empty) Slot 6 (empty) Slot 7 (empty) C:Program FilesSmart card bundle>pkcs11-tool --list-objects unable to enumerate apps: Wrong length pkcs15.c:711:sc_pkcs15_bind: returning with: Unsupported card error: PKCS11 function C_OpenSession failed: rv = CKR_TOKEN_NOT_PRESENT (0xe0) Aborting. C:Program FilesSmart card bundle>pkcs15-tool -L Card not present. C:Program FilesSmart card bundle>pkcs15-tool --reader 1 -L unable to enumerate apps: wrong lenght pkcs15.c:711:sc_pkcs15_bind: returning with: Unsupported card PKCS#15 initialization failed: Unsupported card C:Program FilesSmart card bundle>openvpn --show-pkcs11-slots "C:\Program Files\Smart card bundle\opensc-pkcs11.dll" unable to enumerate apps: Wrong length pkcs15.c:711:sc_pkcs15_bind: returning with: Unsupported card Provider Information: cryptokiVersion: 2.11 manufacturerID: OpenSC Project (www.opensc-proje flags: 0 The following slots are available for use with this provider. Each slot shown below may be used as a parameter to a --pkcs11-slot-type and --pkcs11-slot options. Slots: (id - name) 0 - O2Micro PCMCIA Reader 0 1 - O2Micro PCMCIA Reader 0 2 - O2Micro PCMCIA Reader 0 3 - O2Micro PCMCIA Reader 0 4 - OMNIKEY CardMan 6121 0 5 - OMNIKEY CardMan 6121 0 6 - OMNIKEY CardMan 6121 0 7 - OMNIKEY CardMan 6121 0 C:Program FilesSmart card bundle>openvpn --show-pkcs11-objects "C:\Program Files\Smart card bundle\opensc-pkcs11.dll" 4 PIN: unable to enumerate apps: Wrong length pkcs15.c:711:sc_pkcs15_bind: returning with: Unsupported card Token Information: label: manufacturerID: model: serialNumber: flags: 00000000 You can access this token using --pkcs11-slot-type "label" --pkcs11-slot "" options. PKCS#11: Cannot login to token on slot 4 258-'CKR_USER_PIN_NOT_INITIALIZED' The following objects are available for use with this token. Each object shown below may be used as a parameter to --pkcs11-id-type and --pkcs11-id options. C:Program FilesSmart card bundle>opensc-explorer -r 1 OpenSC Explorer version 0.11.1 OpenSC [3F00]> info Dedicated File ID 3F00 File path: 3F00 File size: 0 bytes ACL for SELECT: N/A ACL for LOCK: N/A ACL for DELETE: N/A ACL for CREATE: N/A ACL for REHABILITATE: N/A ACL for INVALIDATE: N/A ACL for LIST FILES: N/A OpenSC [3F00]> cd 5015 OpenSC [3F00/5015]> cat 4401 00000000: 30 40 30 1A 0C 14 53 65 63 75 72 69 74 79 20 4F 0 <at> 0...Security O 00000010: 66 66 69 63 65 72 20 50 49 4E 03 02 06 C0 30 03 fficer PIN....0. 00000020: 04 01 FF A1 1D 30 1B 03 02 00 0D 0A 01 01 02 01 .....0.......... 00000030: 06 02 01 08 80 01 01 04 01 00 30 06 04 04 3F 00 ..........0...?. 00000040: 50 15 30 3B 30 15 0C 0F 50 49 4E 20 5B 42 61 73 P.0;0...PIN [Bas 00000050: 69 63 20 50 49 4E 5D 03 02 06 C0 30 03 04 01 01 ic PIN]....0.... 00000060: A1 1D 30 1B 03 02 02 4C 0A 01 01 02 01 04 02 01 ..0....L........ 00000070: 08 80 01 83 04 01 00 30 06 04 04 3F 00 50 15 00 .......0...?.P.. 00000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000000A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000000B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000000C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000000D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000000E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000000F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ OpenSC [3F00/5015]> q
Re: opensc reports reader and card, pkcs11 doesn't in Windows XP
	2007-05-08 15:41:33

Hello openSC users, Problem solved! The solution was indeed at the opensc side. In Windows XP and Linux, the command pkcs11-tool --module "C:Program FilesSmart card bundleopensc-pkcs11.dll" --list-objects works fine now and so also "openvpn --config client.ovpn" when I included the following lines in the opensc.conf file: ...   # Starcos SPK 2.4     card_atr "3b:b7:18:00:c0:3e:31:fe:65:53:50:4b:32:34:90:00:25" { ;   driver = "starcos";     name = "STARCOS SPK 2.4";     force_protocol = t0;     } ... The cause of this issue was a not recognized ATR of my Starcos SPK 2.4 smartcard. In my client.ovpn (WinXP) or client.conf (Linux) I used the following configuration: ... ca "C:\Program Files\OpenVPN\config\ca.crt"; # Smart card certificates stored on openSC-pkcs#15 formated Startcos smartcard pkcs11-sign-mode sign pkcs11-providers "C:\Program Files\Smart card bundle\opensc-pkcs11.dll" pkcs11-slot-type label pkcs11-slot "OpenSC Card (PIN)"; pkcs11-id-type id pkcs11-id 02 ... The version of the Smart card bundle package for Windows XP is scb-0.7.exe. In Linux, opensc-0.11.1-6 is installed. Best Regards, Thierry

[1-2]

about | contact Other archives ( Real Estate discussion Medical topics )