Re: [Opensc-devel] PKCS#11 Test suite (PIV)

[Jakub J. <jj...@re...>]

Hello Andreas,

On 05/16/2016 05:40 PM, Andreas Schwier wrote:
> Dear Jakub,
>
> having a central regression test set-up would be great thing.
> Internally we use a PKCS#11 test suite similar to [1] that validates the
> PKCS#11 interface in combination with our SmartCard-HSM. We also have a
> smoke-test that runs a couple of tests on the command line.
Wow, PKCS#11 test suite in Javascript. I did not see everything yet. But 
the concept looks similar to the think that we put together. Having 
something similar in OpenSC that would be possible to run by as many 
users with as many cards as possible would be ultimate goal.

Basically what I see in the linked testsuite is:
  * initialization, key and certificate generation
    * (not applicable for test PIV cards I have)
    * card dependent
  * enumerate
  * encrypt
  * decrypt
  * signature (with and without digest)
    * should be card independent, isn't it?
> Other than that we occasionally do regression testing of the Minidriver.
>
> I guess the biggest issue is, that you need a specific configuration for
> each card. If there was a common testing framework, I'd be happy to
> provide tests for our card.
Great to hear it.
> Andreas
>
>
> [1] https://github.com/CardContact/sc-hsm-embedded/tree/master/p11tests
Thanks for reference and ideas.
Regards,

-- 
Jakub Jelen
Security Technologies
Red Hat