Menu
▾
▴
globalplatform-developers — Mailing List for Developers of this Project
You can subscribe to this list here.
| 2006 |
Jan
|
Feb
|
Mar
(18) |
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
(15) |
Nov
|
Dec
(2) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2007 |
Jan
(2) |
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
(1) |
Sep
|
Oct
|
Nov
|
Dec
|
| 2010 |
Jan
|
Feb
|
Mar
|
Apr
(1) |
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2012 |
Jan
|
Feb
(1) |
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2013 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
(1) |
Nov
(2) |
Dec
|
| 2014 |
Jan
|
Feb
(4) |
Mar
(2) |
Apr
|
May
(2) |
Jun
(3) |
Jul
|
Aug
|
Sep
(4) |
Oct
|
Nov
|
Dec
|
| 2016 |
Jan
|
Feb
|
Mar
|
Apr
(2) |
May
|
Jun
|
Jul
|
Aug
|
Sep
(3) |
Oct
(3) |
Nov
|
Dec
|
| 2017 |
Jan
|
Feb
(2) |
Mar
(2) |
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2019 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
(9) |
Sep
|
Oct
|
Nov
|
Dec
|
| 2020 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
(2) |
Dec
(4) |
|
From: Karsten O. <wid...@t-...> - 2006-03-26 21:01:12
|
Karsten Ohme wrote:
> Karsten Ohme wrote:
>
>>Karsten Ohme wrote:
>>
>>
>>>Iain MacDonnell wrote:
>>
>>
>>>>>BTW, I've run into what appears to be a bigger problem - have you ever
>>>>>tried this stuff on a big-endian machine?
I have run some big endian tests on a Solaris system running on a Sparc.
For some reason the following happens:
char *test = "EE";
sscanf (test, "%02x", &temp);
if temp is a char the conversion is always 00, if temp is an int, it works.
Please try out the GPShell version in CVS. I have fixed probably all
conversions, but I have no possibility to test it.
Karsten
>>>>>
>>>>># /opt/ITmuscle/bin/gpshell list-cflex.txt
>>>>>mode_201
>>>>>enable_trace
>>>>>establish_context
>>>>>card_connect
>>>>>select -AID a0000000030000
>>>>>--> 00A404000700000000000000
>>>>
>>>>
>>>>Note that the AID is not showing in this APDU... compared to below....
>>>
>>>
>>>Mmmh, this is a bigger problem. I will see to fix the conversion
>>>routines, if something like this is used, I'm not sure.
>
>
> This could be the guilty routine (?):
>
> It scans two bytes interpreted as a hex byte:
>
> while (sscanf (&(dummy[i*2]), "%02x", &(pOptionStr->AID[i])) > 0) {
> i++;
> }
>
> I will see.
>
> Karsten
>
>
>>>Thanks, Karsten
>>>
>>>
>>>
>>>>><-- 6A82
>>>>>select_application() returns 0x80216A82 (6A82: The application to be
>>>>>selected could not be found.)
>>>>># uname -a
>>>>>SunOS sb150 5.10 Generic_118822-25 sun4u sparc SUNW,Sun-Blade-100
>>>>>#
>>>>>
>>>>>
>>>>>Maybe the endianess is a red herring too ... but I've successfully used
>>>>>this stuff on Solaris x86...
>>
>>
>>Mmmh, actually I use only byte arrays, no numbers, this should not
>>effect endianess. I will look into GPShell.
>>
>>Karsten
>>
>>
>>
>>>>Same card, same reader, same sources, but on Solaris x86:
>>>>
>>>>
>>>># /opt/ITmuscle/bin/gpshell list-cflex.txt
>>>>mode_201
>>>>enable_trace
>>>>establish_context
>>>>card_connect
>>>>select -AID a0000000030000
>>>>--> 00A4040007A0000000030000
>>>><-- 6F188407A0000000030000A50D9F6E060005020201009F6501FF9000
>>>>open_sc -security 1 -keyind 0 -keyver 0 -mac_key
>>>>404142434445464748494a4b4c4d4e4f -enc_key
>>>>404142434445464748494a4b4c4d4e4f // Open secure channel
>>>>--> 80500000088409FFE1A2E28B4600
>>>><-- 000012010000111401020101E86DFA173682E4673596888A215DE86C9000
>>>>--> 8482010010C8207C7B2A3E416884B431EF23B61CD2
>>>><-- 9000
>>>>get_status -element e0
>>>>--> 80F2E000024F0000
>>>><--
>>>>07A0000000030000070007A0000000620001010007A0000000620101010007A0000000620102010007A0000000620201010007A0000000030000010005A000000001010006A0000000010107009000
>>>>
>>>>
>>>>List of applets (AID state privileges)
>>>>a0000000030000 7 0
>>>>a0000000620001 1 0
>>>>a0000000620101 1 0
>>>>a0000000620102 1 0
>>>>a0000000620201 1 0
>>>>a0000000030000 1 0
>>>>a000000001 1 0
>>>>a00000000101 7 0
>>>>card_disconnect
>>>>release_context
>>>>#
>>>>
>>>> ~Iain
>>>>
>>>>
>>>>
>>>>
>>>>-------------------------------------------------------
>>>>This SF.Net email is sponsored by xPML, a groundbreaking scripting language
>>>>that extends applications into web and mobile media. Attend the live
>>>>webcast
>>>>and join the prime developer group breaking into this new coding territory!
>>>>http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
>>>>_______________________________________________
>>>>Globalplatform-users mailing list
>>>>Glo...@li...
>>>>https://lists.sourceforge.net/lists/listinfo/globalplatform-users
>>>
>>>
>>>
>>>
>>>-------------------------------------------------------
>>>This SF.Net email is sponsored by xPML, a groundbreaking scripting language
>>>that extends applications into web and mobile media. Attend the live webcast
>>>and join the prime developer group breaking into this new coding territory!
>>>http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
>>>_______________________________________________
>>>Globalplatform-users mailing list
>>>Glo...@li...
>>>https://lists.sourceforge.net/lists/listinfo/globalplatform-users
>>
>>
>>
>>
>>-------------------------------------------------------
>>This SF.Net email is sponsored by xPML, a groundbreaking scripting language
>>that extends applications into web and mobile media. Attend the live webcast
>>and join the prime developer group breaking into this new coding territory!
>>http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
>>_______________________________________________
>>Globalplatform-developers mailing list
>>Glo...@li...
>>https://lists.sourceforge.net/lists/listinfo/globalplatform-developers
>
>
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by xPML, a groundbreaking scripting language
> that extends applications into web and mobile media. Attend the live webcast
> and join the prime developer group breaking into this new coding territory!
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
> _______________________________________________
> Globalplatform-developers mailing list
> Glo...@li...
> https://lists.sourceforge.net/lists/listinfo/globalplatform-developers
|
|
From: Karsten O. <wid...@t-...> - 2006-03-25 06:14:53
|
Karsten Ohme wrote:
> Karsten Ohme wrote:
>
>>Iain MacDonnell wrote:
>
>
>>>>BTW, I've run into what appears to be a bigger problem - have you ever
>>>>tried this stuff on a big-endian machine?
>>>>
>>>># /opt/ITmuscle/bin/gpshell list-cflex.txt
>>>>mode_201
>>>>enable_trace
>>>>establish_context
>>>>card_connect
>>>>select -AID a0000000030000
>>>>--> 00A404000700000000000000
>>>
>>>
>>>Note that the AID is not showing in this APDU... compared to below....
>>
>>
>>Mmmh, this is a bigger problem. I will see to fix the conversion
>>routines, if something like this is used, I'm not sure.
This could be the guilty routine (?):
It scans two bytes interpreted as a hex byte:
while (sscanf (&(dummy[i*2]), "%02x", &(pOptionStr->AID[i])) > 0) {
i++;
}
I will see.
Karsten
>>
>>Thanks, Karsten
>>
>>
>>>><-- 6A82
>>>>select_application() returns 0x80216A82 (6A82: The application to be
>>>>selected could not be found.)
>>>># uname -a
>>>>SunOS sb150 5.10 Generic_118822-25 sun4u sparc SUNW,Sun-Blade-100
>>>>#
>>>>
>>>>
>>>>Maybe the endianess is a red herring too ... but I've successfully used
>>>>this stuff on Solaris x86...
>
>
> Mmmh, actually I use only byte arrays, no numbers, this should not
> effect endianess. I will look into GPShell.
>
> Karsten
>
>
>>>
>>>Same card, same reader, same sources, but on Solaris x86:
>>>
>>>
>>># /opt/ITmuscle/bin/gpshell list-cflex.txt
>>>mode_201
>>>enable_trace
>>>establish_context
>>>card_connect
>>>select -AID a0000000030000
>>>--> 00A4040007A0000000030000
>>><-- 6F188407A0000000030000A50D9F6E060005020201009F6501FF9000
>>>open_sc -security 1 -keyind 0 -keyver 0 -mac_key
>>>404142434445464748494a4b4c4d4e4f -enc_key
>>>404142434445464748494a4b4c4d4e4f // Open secure channel
>>>--> 80500000088409FFE1A2E28B4600
>>><-- 000012010000111401020101E86DFA173682E4673596888A215DE86C9000
>>>--> 8482010010C8207C7B2A3E416884B431EF23B61CD2
>>><-- 9000
>>>get_status -element e0
>>>--> 80F2E000024F0000
>>><--
>>>07A0000000030000070007A0000000620001010007A0000000620101010007A0000000620102010007A0000000620201010007A0000000030000010005A000000001010006A0000000010107009000
>>>
>>>
>>>List of applets (AID state privileges)
>>>a0000000030000 7 0
>>>a0000000620001 1 0
>>>a0000000620101 1 0
>>>a0000000620102 1 0
>>>a0000000620201 1 0
>>>a0000000030000 1 0
>>>a000000001 1 0
>>>a00000000101 7 0
>>>card_disconnect
>>>release_context
>>>#
>>>
>>> ~Iain
>>>
>>>
>>>
>>>
>>>-------------------------------------------------------
>>>This SF.Net email is sponsored by xPML, a groundbreaking scripting language
>>>that extends applications into web and mobile media. Attend the live
>>>webcast
>>>and join the prime developer group breaking into this new coding territory!
>>>http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
>>>_______________________________________________
>>>Globalplatform-users mailing list
>>>Glo...@li...
>>>https://lists.sourceforge.net/lists/listinfo/globalplatform-users
>>
>>
>>
>>
>>-------------------------------------------------------
>>This SF.Net email is sponsored by xPML, a groundbreaking scripting language
>>that extends applications into web and mobile media. Attend the live webcast
>>and join the prime developer group breaking into this new coding territory!
>>http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
>>_______________________________________________
>>Globalplatform-users mailing list
>>Glo...@li...
>>https://lists.sourceforge.net/lists/listinfo/globalplatform-users
>
>
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by xPML, a groundbreaking scripting language
> that extends applications into web and mobile media. Attend the live webcast
> and join the prime developer group breaking into this new coding territory!
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
> _______________________________________________
> Globalplatform-developers mailing list
> Glo...@li...
> https://lists.sourceforge.net/lists/listinfo/globalplatform-developers
|
|
From: Karsten O. <wid...@t-...> - 2006-03-25 05:55:47
|
Karsten Ohme wrote: > Iain MacDonnell wrote: >>>BTW, I've run into what appears to be a bigger problem - have you ever >>>tried this stuff on a big-endian machine? >>> >>># /opt/ITmuscle/bin/gpshell list-cflex.txt >>>mode_201 >>>enable_trace >>>establish_context >>>card_connect >>>select -AID a0000000030000 >>>--> 00A404000700000000000000 >> >> >>Note that the AID is not showing in this APDU... compared to below.... > > > Mmmh, this is a bigger problem. I will see to fix the conversion > routines, if something like this is used, I'm not sure. > > Thanks, Karsten > >>><-- 6A82 >>>select_application() returns 0x80216A82 (6A82: The application to be >>>selected could not be found.) >>># uname -a >>>SunOS sb150 5.10 Generic_118822-25 sun4u sparc SUNW,Sun-Blade-100 >>># >>> >>> >>>Maybe the endianess is a red herring too ... but I've successfully used >>>this stuff on Solaris x86... Mmmh, actually I use only byte arrays, no numbers, this should not effect endianess. I will look into GPShell. Karsten >> >> >>Same card, same reader, same sources, but on Solaris x86: >> >> >># /opt/ITmuscle/bin/gpshell list-cflex.txt >>mode_201 >>enable_trace >>establish_context >>card_connect >>select -AID a0000000030000 >>--> 00A4040007A0000000030000 >><-- 6F188407A0000000030000A50D9F6E060005020201009F6501FF9000 >>open_sc -security 1 -keyind 0 -keyver 0 -mac_key >>404142434445464748494a4b4c4d4e4f -enc_key >>404142434445464748494a4b4c4d4e4f // Open secure channel >>--> 80500000088409FFE1A2E28B4600 >><-- 000012010000111401020101E86DFA173682E4673596888A215DE86C9000 >>--> 8482010010C8207C7B2A3E416884B431EF23B61CD2 >><-- 9000 >>get_status -element e0 >>--> 80F2E000024F0000 >><-- >>07A0000000030000070007A0000000620001010007A0000000620101010007A0000000620102010007A0000000620201010007A0000000030000010005A000000001010006A0000000010107009000 >> >> >>List of applets (AID state privileges) >>a0000000030000 7 0 >>a0000000620001 1 0 >>a0000000620101 1 0 >>a0000000620102 1 0 >>a0000000620201 1 0 >>a0000000030000 1 0 >>a000000001 1 0 >>a00000000101 7 0 >>card_disconnect >>release_context >># >> >> ~Iain >> >> >> >> >>------------------------------------------------------- >>This SF.Net email is sponsored by xPML, a groundbreaking scripting language >>that extends applications into web and mobile media. Attend the live >>webcast >>and join the prime developer group breaking into this new coding territory! >>http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642 >>_______________________________________________ >>Globalplatform-users mailing list >>Glo...@li... >>https://lists.sourceforge.net/lists/listinfo/globalplatform-users > > > > > ------------------------------------------------------- > This SF.Net email is sponsored by xPML, a groundbreaking scripting language > that extends applications into web and mobile media. Attend the live webcast > and join the prime developer group breaking into this new coding territory! > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642 > _______________________________________________ > Globalplatform-users mailing list > Glo...@li... > https://lists.sourceforge.net/lists/listinfo/globalplatform-users |
|
From: Karsten O. <wid...@t-...> - 2006-03-25 05:40:36
|
Iain MacDonnell wrote: > > > Iain MacDonnell wrote on 03/24/06 08:33 PM: > >> >> >> Karsten Ohme wrote on 03/24/06 08:03 PM: >> >>> Iain MacDonnell wrote: >>> >>>> >>>> Two questions: >>>> >>>> 1) Is OpenSSL 0.9.7e really needed? The configure script checks for >>>> PEM_read_bio_PrivateKey(), but I don't see that actually used >>>> anywhere. Solaris 10 comes with 0.9.7d, and like to use that if >>>> there isn't a real need for 0.9.7e ... ? >>> >>> >>> No. If the API has all needed function, it is OK. The check is only >>> performed to make sure that the library is OK. Does this step cause a >>> problem? I don't know if the version 0.9.7d has all needed functions, if >>> you are successful, I can change the e to a d. >> >> >> The problem was that AC_CHECK_LIB failed. The CVS was not up to date. The release version was newer. This should fix the crypto problems below. >> >> >>> I changed it to PEM_read_PrivateKey, which is used e.g. in >>> OP201_calculate_rsa_DAP(). >> >> >> Err, you changed it in the error message but not in the actual test :) >> >> AC_CHECK_LIB(ssl, PEM_read_bio_PrivateKey, [], >> [AC_MSG_ERROR([PEM_read_PrivateKey() not >> found, install OpenSSL 0.9.7e or later])]) >> >> but wait - that's a red herring anyway - the real problem is that you >> need to change "ssl" to "crypto", as libcrypto, not libssl, is where >> PEM_read_bio_PrivateKey() is visible. >> >> With that change, configure finishes successfully, even with 0.9.7d. >> >> >>>> 2) It seems that libGlobalPlatform.so needs to be linked to libcrypto, >>>> but it isn't - I have to manually add '-lcrypto' when building >>>> anything that uses libGlobalPlatform.so (including GPShell) >>> >>> >>> I changed the AC_CHECK_LIB autoconf macro to look for the crypto >>> library. >>> >>> Let me know, if it works. >> >> >> Ahhh, you need to do that for GlobalPlatform2.1.1 too - then both my >> problems will be solved, I believe. >> >> >>> I released at: >>> >>> http://sourceforge.net/project/showfiles.php?group_id=143343 >>> >>> the current versions of GlobalPlatform and GPShell. Should be the >>> same state as the CVS. >> >> >> I'm working from CVS. >> >> BTW, I've run into what appears to be a bigger problem - have you ever >> tried this stuff on a big-endian machine? >> >> # /opt/ITmuscle/bin/gpshell list-cflex.txt >> mode_201 >> enable_trace >> establish_context >> card_connect >> select -AID a0000000030000 >> --> 00A404000700000000000000 > > > Note that the AID is not showing in this APDU... compared to below.... Mmmh, this is a bigger problem. I will see to fix the conversion routines, if something like this is used, I'm not sure. Thanks, Karsten > >> <-- 6A82 >> select_application() returns 0x80216A82 (6A82: The application to be >> selected could not be found.) >> # uname -a >> SunOS sb150 5.10 Generic_118822-25 sun4u sparc SUNW,Sun-Blade-100 >> # >> >> >> Maybe the endianess is a red herring too ... but I've successfully used >> this stuff on Solaris x86... > > > Same card, same reader, same sources, but on Solaris x86: > > > # /opt/ITmuscle/bin/gpshell list-cflex.txt > mode_201 > enable_trace > establish_context > card_connect > select -AID a0000000030000 > --> 00A4040007A0000000030000 > <-- 6F188407A0000000030000A50D9F6E060005020201009F6501FF9000 > open_sc -security 1 -keyind 0 -keyver 0 -mac_key > 404142434445464748494a4b4c4d4e4f -enc_key > 404142434445464748494a4b4c4d4e4f // Open secure channel > --> 80500000088409FFE1A2E28B4600 > <-- 000012010000111401020101E86DFA173682E4673596888A215DE86C9000 > --> 8482010010C8207C7B2A3E416884B431EF23B61CD2 > <-- 9000 > get_status -element e0 > --> 80F2E000024F0000 > <-- > 07A0000000030000070007A0000000620001010007A0000000620101010007A0000000620102010007A0000000620201010007A0000000030000010005A000000001010006A0000000010107009000 > > > List of applets (AID state privileges) > a0000000030000 7 0 > a0000000620001 1 0 > a0000000620101 1 0 > a0000000620102 1 0 > a0000000620201 1 0 > a0000000030000 1 0 > a000000001 1 0 > a00000000101 7 0 > card_disconnect > release_context > # > > ~Iain > > > > > ------------------------------------------------------- > This SF.Net email is sponsored by xPML, a groundbreaking scripting language > that extends applications into web and mobile media. Attend the live > webcast > and join the prime developer group breaking into this new coding territory! > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642 > _______________________________________________ > Globalplatform-users mailing list > Glo...@li... > https://lists.sourceforge.net/lists/listinfo/globalplatform-users |
|
From: Iain M. <mu...@ds...> - 2006-03-25 04:50:48
|
Iain MacDonnell wrote on 03/24/06 08:33 PM: > > > Karsten Ohme wrote on 03/24/06 08:03 PM: >> Iain MacDonnell wrote: >>> >>> Two questions: >>> >>> 1) Is OpenSSL 0.9.7e really needed? The configure script checks for >>> PEM_read_bio_PrivateKey(), but I don't see that actually used >>> anywhere. Solaris 10 comes with 0.9.7d, and like to use that if >>> there isn't a real need for 0.9.7e ... ? >> >> No. If the API has all needed function, it is OK. The check is only >> performed to make sure that the library is OK. Does this step cause a >> problem? I don't know if the version 0.9.7d has all needed functions, if >> you are successful, I can change the e to a d. > > The problem was that AC_CHECK_LIB failed. > > >> I changed it to PEM_read_PrivateKey, which is used e.g. in >> OP201_calculate_rsa_DAP(). > > Err, you changed it in the error message but not in the actual test :) > > AC_CHECK_LIB(ssl, PEM_read_bio_PrivateKey, [], > [AC_MSG_ERROR([PEM_read_PrivateKey() not > found, install OpenSSL 0.9.7e or later])]) > > but wait - that's a red herring anyway - the real problem is that you > need to change "ssl" to "crypto", as libcrypto, not libssl, is where > PEM_read_bio_PrivateKey() is visible. > > With that change, configure finishes successfully, even with 0.9.7d. > > >>> 2) It seems that libGlobalPlatform.so needs to be linked to libcrypto, >>> but it isn't - I have to manually add '-lcrypto' when building >>> anything that uses libGlobalPlatform.so (including GPShell) >> >> I changed the AC_CHECK_LIB autoconf macro to look for the crypto library. >> >> Let me know, if it works. > > Ahhh, you need to do that for GlobalPlatform2.1.1 too - then both my > problems will be solved, I believe. > > >> I released at: >> >> http://sourceforge.net/project/showfiles.php?group_id=143343 >> >> the current versions of GlobalPlatform and GPShell. Should be the same >> state as the CVS. > > I'm working from CVS. > > BTW, I've run into what appears to be a bigger problem - have you ever > tried this stuff on a big-endian machine? > > # /opt/ITmuscle/bin/gpshell list-cflex.txt > mode_201 > enable_trace > establish_context > card_connect > select -AID a0000000030000 > --> 00A404000700000000000000 Note that the AID is not showing in this APDU... compared to below.... > <-- 6A82 > select_application() returns 0x80216A82 (6A82: The application to be > selected could not be found.) > # uname -a > SunOS sb150 5.10 Generic_118822-25 sun4u sparc SUNW,Sun-Blade-100 > # > > > Maybe the endianess is a red herring too ... but I've successfully used > this stuff on Solaris x86... Same card, same reader, same sources, but on Solaris x86: # /opt/ITmuscle/bin/gpshell list-cflex.txt mode_201 enable_trace establish_context card_connect select -AID a0000000030000 --> 00A4040007A0000000030000 <-- 6F188407A0000000030000A50D9F6E060005020201009F6501FF9000 open_sc -security 1 -keyind 0 -keyver 0 -mac_key 404142434445464748494a4b4c4d4e4f -enc_key 404142434445464748494a4b4c4d4e4f // Open secure channel --> 80500000088409FFE1A2E28B4600 <-- 000012010000111401020101E86DFA173682E4673596888A215DE86C9000 --> 8482010010C8207C7B2A3E416884B431EF23B61CD2 <-- 9000 get_status -element e0 --> 80F2E000024F0000 <-- 07A0000000030000070007A0000000620001010007A0000000620101010007A0000000620102010007A0000000620201010007A0000000030000010005A000000001010006A0000000010107009000 List of applets (AID state privileges) a0000000030000 7 0 a0000000620001 1 0 a0000000620101 1 0 a0000000620102 1 0 a0000000620201 1 0 a0000000030000 1 0 a000000001 1 0 a00000000101 7 0 card_disconnect release_context # ~Iain |
|
From: Iain M. <mu...@ds...> - 2006-03-25 04:33:12
|
Karsten Ohme wrote on 03/24/06 08:03 PM:
> Iain MacDonnell wrote:
>>
>> Two questions:
>>
>> 1) Is OpenSSL 0.9.7e really needed? The configure script checks for
>> PEM_read_bio_PrivateKey(), but I don't see that actually used
>> anywhere. Solaris 10 comes with 0.9.7d, and like to use that if
>> there isn't a real need for 0.9.7e ... ?
>
> No. If the API has all needed function, it is OK. The check is only
> performed to make sure that the library is OK. Does this step cause a
> problem? I don't know if the version 0.9.7d has all needed functions, if
> you are successful, I can change the e to a d.
The problem was that AC_CHECK_LIB failed.
> I changed it to PEM_read_PrivateKey, which is used e.g. in
> OP201_calculate_rsa_DAP().
Err, you changed it in the error message but not in the actual test :)
AC_CHECK_LIB(ssl, PEM_read_bio_PrivateKey, [],
[AC_MSG_ERROR([PEM_read_PrivateKey() not
found, install OpenSSL 0.9.7e or later])])
but wait - that's a red herring anyway - the real problem is that you
need to change "ssl" to "crypto", as libcrypto, not libssl, is where
PEM_read_bio_PrivateKey() is visible.
With that change, configure finishes successfully, even with 0.9.7d.
>> 2) It seems that libGlobalPlatform.so needs to be linked to libcrypto,
>> but it isn't - I have to manually add '-lcrypto' when building
>> anything that uses libGlobalPlatform.so (including GPShell)
>
> I changed the AC_CHECK_LIB autoconf macro to look for the crypto library.
>
> Let me know, if it works.
Ahhh, you need to do that for GlobalPlatform2.1.1 too - then both my
problems will be solved, I believe.
> I released at:
>
> http://sourceforge.net/project/showfiles.php?group_id=143343
>
> the current versions of GlobalPlatform and GPShell. Should be the same
> state as the CVS.
I'm working from CVS.
BTW, I've run into what appears to be a bigger problem - have you ever
tried this stuff on a big-endian machine?
# /opt/ITmuscle/bin/gpshell list-cflex.txt
mode_201
enable_trace
establish_context
card_connect
select -AID a0000000030000
--> 00A404000700000000000000
<-- 6A82
select_application() returns 0x80216A82 (6A82: The application to be
selected could not be found.)
# uname -a
SunOS sb150 5.10 Generic_118822-25 sun4u sparc SUNW,Sun-Blade-100
#
Maybe the endianess is a red herring too ... but I've successfully used
this stuff on Solaris x86...
Thanks!
~Iain
|
|
From: Karsten O. <ko...@in...> - 2006-03-25 04:04:06
|
Iain MacDonnell wrote: > > Two questions: > > 1) Is OpenSSL 0.9.7e really needed? The configure script checks for > PEM_read_bio_PrivateKey(), but I don't see that actually used > anywhere. Solaris 10 comes with 0.9.7d, and like to use that if > there isn't a real need for 0.9.7e ... ? No. If the API has all needed function, it is OK. The check is only performed to make sure that the library is OK. Does this step cause a problem? I don't know if the version 0.9.7d has all needed functions, if you are successful, I can change the e to a d. I changed it to PEM_read_PrivateKey, which is used e.g. in OP201_calculate_rsa_DAP(). > > 2) It seems that libGlobalPlatform.so needs to be linked to libcrypto, > but it isn't - I have to manually add '-lcrypto' when building > anything that uses libGlobalPlatform.so (including GPShell) I changed the AC_CHECK_LIB autoconf macro to look for the crypto library. Let me know, if it works. I released at: http://sourceforge.net/project/showfiles.php?group_id=143343 the current versions of GlobalPlatform and GPShell. Should be the same state as the CVS. Thanks, Karsten > > muscle*iml-v240-1:/export/stuff/ws/globalplatform/GlobalPlatform2.1.1% > ldd .libs/libGlobalPlatform.so > libpcsclite.so.1 => /opt/ITmuscle/lib/libpcsclite.so.1 > libc.so.1 => /lib/libc.so.1 > libdl.so.1 => /lib/libdl.so.1 > libpthread.so.1 => /lib/libpthread.so.1 > libsocket.so.1 => /lib/libsocket.so.1 > libnsl.so.1 => /lib/libnsl.so.1 > libmp.so.2 => /lib/libmp.so.2 > libmd5.so.1 => /lib/libmd5.so.1 > libscf.so.1 => /lib/libscf.so.1 > libdoor.so.1 => /lib/libdoor.so.1 > libuutil.so.1 => /lib/libuutil.so.1 > libm.so.2 => /lib/libm.so.2 > /platform/SUNW,Sun-Fire-V240/lib/libc_psr.so.1 > /platform/SUNW,Sun-Fire-V240/lib/libmd5_psr.so.1 > muscle*iml-v240-1:/export/stuff/ws/globalplatform/GlobalPlatform2.1.1% > > > Thx, > > ~Iain > > > |
|
From: Iain M. <mu...@ds...> - 2006-03-25 02:08:28
|
Two questions:
1) Is OpenSSL 0.9.7e really needed? The configure script checks for
PEM_read_bio_PrivateKey(), but I don't see that actually used
anywhere. Solaris 10 comes with 0.9.7d, and like to use that if
there isn't a real need for 0.9.7e ... ?
2) It seems that libGlobalPlatform.so needs to be linked to libcrypto,
but it isn't - I have to manually add '-lcrypto' when building
anything that uses libGlobalPlatform.so (including GPShell)
muscle*iml-v240-1:/export/stuff/ws/globalplatform/GlobalPlatform2.1.1%
ldd .libs/libGlobalPlatform.so
libpcsclite.so.1 => /opt/ITmuscle/lib/libpcsclite.so.1
libc.so.1 => /lib/libc.so.1
libdl.so.1 => /lib/libdl.so.1
libpthread.so.1 => /lib/libpthread.so.1
libsocket.so.1 => /lib/libsocket.so.1
libnsl.so.1 => /lib/libnsl.so.1
libmp.so.2 => /lib/libmp.so.2
libmd5.so.1 => /lib/libmd5.so.1
libscf.so.1 => /lib/libscf.so.1
libdoor.so.1 => /lib/libdoor.so.1
libuutil.so.1 => /lib/libuutil.so.1
libm.so.2 => /lib/libm.so.2
/platform/SUNW,Sun-Fire-V240/lib/libc_psr.so.1
/platform/SUNW,Sun-Fire-V240/lib/libmd5_psr.so.1
muscle*iml-v240-1:/export/stuff/ws/globalplatform/GlobalPlatform2.1.1%
Thx,
~Iain
|
2 messages has been excluded from this view by a project administrator.
