Re: [Opensc-devel] Cannot delete imported private key from SmartCard-HSM

[Marek S. <scr...@wp...>]

On 2015-10-19 11:30, Andreas Schwier wrote:

> What does pkcs15-tool -D show ?
It shows a private-key object with the label I gave it during the import
attempt, key ref 0 and usage flags 0x4 (the import source had more) but
otherwise identical to the card-generated keys. Yes, including "native"
set to yes.

> You can manually erase the key file and/or meta data file after PIN
> verification using opensc-tool or a script for the Smart Card Shell.
I've just managed to delete 0xC400 using opensc-explorer (I did not know
how to do it using opensc-tool) and, as expected, the imported key has
disappeared from the pkcs15-tool -D output. Thanks! I couldn't delete
0xCC00 though, even if I verify the SO PIN instead of the user PIN I get
the "not allowed" error. Will the presence of a key object without the
corresponding metadata on the card cause problems in the future?

-- 
MS