Re: [Opensc-devel] opensc-explorer, PIN length 10

[Martin P. <ma...@ma...>]

Hello,

Keep in mind that opensc-explorer is a "low level tool". Your best
option is to compare the actual commands (opensc-explorer -vvv) to
what succeeds above (00 20 00 81 0A 30 34 35 32 39 31 FF FF FF FF).
Also, if the PKCS#11 module selects some DF-s beforehand, you need to
manually do that with opensc-explorer.

Martin
--
Martin
+372 5156495


On Fri, May 17, 2013 at 12:48 PM, Johannes Becker
<Joh...@hr...> wrote:
> Am Montag 06 Mai 2013 schrieb Martin Paljak <ma...@ma...>:
>
>
>
>>
>
>> As said before: do have a peek at the log of an actual verification
>
>> performed by Firefox.
>
>
>
> Firefox, pkcs11-tool and pkcs15-tool work with the card.
>
> They send the pin with lenth 10, padded with FF (see below).
>
>
>
> It is only opensc-explorer, that doesn't pass the pin with length 10
>
>
>
> I guess now I have to learn how to write the certificat to the card using
> pkcs11-tool
>
>
>
> I tested with opensc 0.12.2
>
>
>
> Johannes
>
>
>
> -----
>
>
>
> 0x7f05005d3700 10:11:20.803 [opensc-pkcs11] apdu.c:184:sc_apdu_log:
>
> Outgoing APDU data [ 15 bytes] =====================================
>
> 00 20 00 81 0A 30 34 35 32 39 31 FF FF FF FF . ...045291....
>
> ======================================================================
>
> 0x7f05005d3700 10:11:20.803 [opensc-pkcs11]
> reader-pcsc.c:176:pcsc_internal_transmit: called
>
> 0x7f05005d3700 10:11:20.856 [opensc-pkcs11] apdu.c:184:sc_apdu_log:
>
> Incoming APDU data [ 2 bytes] =====================================
>
> 90 00 ..
>
> ======================================================================
>
> 0x7f05005d3700 10:11:20.856 [opensc-pkcs11] card.c:330:sc_unlock: called
>
> 0x7f05005d3700 10:11:20.856 [opensc-pkcs11] sec.c:204:sc_pin_cmd: returning
> with: 0 (Success)
>
> 0x7f05005d3700 10:11:20.856 [opensc-pkcs11]
> pkcs15-pin.c:509:sc_pkcs15_pincache_add: called
>
> 0x7f05005d3700 10:11:20.856 [opensc-pkcs11]
> pkcs15-pin.c:543:sc_pkcs15_pincache_add: PIN(User Pin) cached
>
> 0x7f05005d3700 10:11:20.856 [opensc-pkcs11] card.c:330:sc_unlock: called
>
> 0x7f05005d3700 10:11:20.856 [opensc-pkcs11] reader-pcsc.c:548:pcsc_unlock:
> called
>
> 0x7f05005d3700 10:11:20.861 [opensc-pkcs11]
> pkcs15-pin.c:296:sc_pkcs15_verify_pin: returning with: 0 (Success)