Re: [Opensc-devel] issues with smartcards and openvpn when renegotiating keys

[Ludovic R. <lud...@gm...>]

2013/2/15 Chris J Arges <chr...@gm...>:
> On 02/15/2013 09:17 AM, Ludovic Rousseau wrote:
>> 2013/2/15 Chris J Arges <chr...@gm...>:
>>> On 02/15/2013 01:50 AM, Ludovic Rousseau wrote:
>>
>>>> What happens in the pcscd log when OpenSC reports SCARD_E_NO_SERVICE?
>>>
>>> Unfortunately I'm not sure how to relate the timestamps between logs. So
>>> I re-ran and redirected everything into a single file. I've attached
>>> this log.
>>>
>>> When OpenSC reports SCARD_E_NO_SERVICE (0x8010001d), there is no
>>> activity from pcscd. However, I am sure it hasn't crashed as the process
>>> is still running after I kill openvpn.
>>
>> Install the pcsc-tool package. And use the command pcsc_scan to list
>> the connected readers. You can exit pcsc_scan using Ctrl-C
>> After OpenSC reports SCARD_E_NO_SERVICE start pcsc_scan again to see
>> if this application can contact pcscd.
>>
>>
>> Also can you upgrade pcsc-lite from 1.7.4 to 1.8.6?
>> You may be able to use the Ubuntu packages from raring [1]. Or at
>> least try version 1.8.5 [2] from quantal.
>> You will need to upgrade pcscd and libpcsclite1 packages.
>>
> Hi,
> Yes this is what I originally did was to actually try and run everything
> from Raring to test the latest versions; however I was unable to connect
> to the OpenVPN server at all. With pcsc-lite 1.8.6, installed onto 12.04
> I have the same issues. I'll attach a new log with this information.
>
> Here are the versions for the new log:
> pcscd - Version: 1.8.6-3ubuntu1
> pcsc-tools - Version: 1.4.18-1
> libccid - Version: 1.4.5-1
> libpcsclite1 - Version: 1.8.6-3ubuntu1
> opensc - Version: 0.12.2-2ubuntu1
> libp11-2 - Version: 0.2.8-2
> libengine-pkcs11-openssl - Version: 0.1.8-2build1
> openvpn - Version: 2.2.1-8ubuntu1
> libpkcs11-helper1 - Version: 1.09-1
>
> I have also attached pcsc_scan(before|after) which show the output of
> pcsc_scan before initiating the openvpn connection, and after. It is
> identical.

I can't find the SCARD_E_NO_SERVICE (0x8010001d) error in this log.
Maybe you still have a problem but it should not be the same as before.

Bye

-- 
 Dr. Ludovic Rousseau