problem when unblocking pin

Hi there,

First I'm almost a newbie as far as smartcards are used.

I'm using the opensc 0.11.4-3 and openct 0.6.14-2 packages 
on a Debian box.

I'm using a Rainbow iKey 3000 and I've tested the same
commands with both OpenCT and with pcscd+Rainbow library,
each time with the same result : impossible to unblock the
pin

I've used this usb key with strongswan to create VPNs on
this very 
same machine and configuration, and it works flawlessly :
pin code 
is asked to me and vpn gets started. 

Unfortunately while playing with the key I've blocked it...

the pin can be unblocked from a Windows application using
the SO Pin. I don't remember the name of the app though,
but
I've seen it being done.

I suspect there's something fishy with the content of my
key,
since pkcs15-tool --unblock-pin doesn't seem to ask the
correct
unblocking PIN code to me :

--- CUT ---
jeromehoulala:~$ pkcs15-tool --list-pins
PIN [User Pin]
        Com. Flags: 0x3
        ID        : 82
        Flags     : [0x933], case-sensitive, local,
initialized, needs-padding, disable_allowed,
exchangeRefData
        Length    : min_len:4, max_len:8, stored_len:8
        Pad char  : 0x00
        Reference : 130
        Type      : ascii-numeric
        Path      : 3f005015

PIN [SO Pin]
        Com. Flags: 0x3
        ID        : 83
        Flags     : [0x9B3], case-sensitive, local,
initialized, needs-padding, soPin, disable_allowed,
exchangeRefData
        Length    : min_len:4, max_len:8, stored_len:8
        Pad char  : 0x00
        Reference : 131
        Type      : ascii-numeric
        Path      : 3f005015

jeromehoulala:~$ pkcs15-tool --unblock-pin
Enter PUK [User Pin]: 
Enter new PIN [User Pin]: 
Enter new PIN again [User Pin]: 
[pkcs15-tool] iso7816.c:99:iso7816_check_sw: Authentication
method blocked
[pkcs15-tool] sec.c:201:sc_pin_cmd: returning with:
Authentication method blocked
PIN unblocking failed: Authentication method blocked

jeromehoulala:~$ pkcs15-tool --unblock-pin --puk 12345678
Enter new PIN [User Pin]: 
Enter new PIN again [User Pin]: 
[pkcs15-tool] iso7816.c:99:iso7816_check_sw: Authentication
method blocked
[pkcs15-tool] sec.c:201:sc_pin_cmd: returning with:
Authentication method blocked
PIN unblocking failed: Authentication method blocked

jeromehoulala:~$ pkcs15-tool --unblock-pin --puk 12345678
--auth-id 83
Enter new PIN [SO Pin]: 
Enter new PIN again [SO Pin]: 
[pkcs15-tool] iso7816.c:99:iso7816_check_sw: Conditions of
use not satisfied
[pkcs15-tool] sec.c:201:sc_pin_cmd: returning with: Not
allowed
PIN unblocking failed: Not allowed
jeromehoulala:~$
--- CUT ---

There's something I don't get. Could someone explain this to
me ?

I think the key doesn't link the SO pin to the user pin when
unlocking,
or something like that, but I don't see why.

Is there something I had done wrong ?

NB : I didn't manually create this key, the SO created it
for me under
his Windows app, using the same procedure as for other
people, and
from Windows, the PIN can be blocked and then unblocked with
the
SO pin (here '12345678').

Thanks in advance

Jerome Alet
_______________________________________________
opensc-user mailing list
opensc-userlists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-
user

problem when unblocking pin

Thread: problem when unblocking pin