Re: [Opensc-devel] issues with smartcards and openvpn when renegotiating keys

[Ludovic R. <lud...@gm...>]

2013/2/15 Chris J Arges <chr...@gm...>:
> On 02/14/2013 04:16 PM, Alon Bar-Lev wrote:
>> I don't see an issue, you are being asked for PIN, this means that the
>> card was found.
>>
>
> In this part of the openvpn log you see it asks for the user PIN, and I
> correctly enter the PIN. However it then gives a CKR_GENERAL_ERROR.
>
> Thu Feb 14 12:05:55 2013 us=249692 PKCS#11: pkcs11h_token_freeTokenId return
> Thu Feb 14 12:05:55 2013 us=249697 PKCS#11: _pkcs11h_session_reset
> return rv=0-'CKR_OK', *p_slot=1
> Thu Feb 14 12:05:55 2013 us=249717 PKCS#11: Calling pin_prompt hook for
> 'Client (User PIN)'
> Thu Feb 14 12:05:59 2013 us=213357 PKCS#11: pin_prompt hook return rv=0
> Thu Feb 14 12:05:59 2013 us=213669 PKCS#11: _pkcs11h_session_login
> C_Login rv=5-'CKR_GENERAL_ERROR'
>
> If you look at the opensc log from the same time you see:
>
> 0x7fd535a83700 12:05:55.249 [opensc-pkcs11]
> misc.c:136:session_start_operation: called
> 0x7fd535a83700 12:05:55.249 [opensc-pkcs11]
> misc.c:137:session_start_operation: Session 0x7fd537cf67c0, type 1
> 0x7fd535a83700 12:05:55.249 [opensc-pkcs11]
> pkcs11-object.c:594:C_SignInit: C_SignInit() = CKR_OK
> 0x7fd535a83700 12:05:55.249 [opensc-pkcs11]
> misc.c:158:session_get_operation: called
> 0x7fd535a83700 12:05:55.249 [opensc-pkcs11]
> misc.c:158:session_get_operation: called
> 0x7fd535a83700 12:05:55.249 [opensc-pkcs11]
> misc.c:158:session_get_operation: called
> 0x7fd535a83700 12:05:55.249 [opensc-pkcs11]
> framework-pkcs15.c:2630:pkcs15_prkey_sign: Initiating signing operation,
> mechanism 0x1.
> 0x7fd535a83700 12:05:55.249 [opensc-pkcs11] card.c:292:sc_lock: called
> 0x7fd535a83700 12:05:55.249 [opensc-pkcs11] reader-pcsc.c:511:pcsc_lock:
> called
> 0x7fd535a83700 12:05:55.249 [opensc-pkcs11] reader-pcsc.c:538:pcsc_lock:
> Gemalto GemPC Express 00 00:SCardBeginTransaction failed: 0x8010001d
> 0x7fd535a83700 12:05:55.249 [opensc-pkcs11]
> misc.c:59:sc_to_cryptoki_error_common: libopensc return value: -1101 (No
> readers found)
> 0x7fd535a83700 12:05:55.249 [opensc-pkcs11] pkcs11-object.c:635:C_Sign:
> C_Sign() = CKR_GENERAL_ERROR
>
> So it tries to call sc_lock, but somewhere SCARD_E_NO_SERVICE is being
> returned. And at this point the card reader and smartcard are in my
> computer.

SCARD_E_NO_SERVICE is returned when pcscd is not running (or has crashed).
>From you first log_pcscd.txt log file I can't find any crash of pcscd.

What happens in the pcscd log when OpenSC reports SCARD_E_NO_SERVICE?

Bye

-- 
 Dr. Ludovic Rousseau