Re: [Opensc-devel] OpenSC onepin

[Frank M. <fra...@gm...>]

I think the onepin module is only needed for Firefox, which doesn't handle
two PINs in a user convenient way. We could try to guess if we were loaded
by Firefox and then switch on the onepin setting (if it wasn't specified
via opensc.conf. Finding out which process loaded the PKCS#11 module could,
however, get a bit complicated (https://stackoverflow.com/a/1024937)...
Anyway, that would eliminate the need for the onepin module!

2016-10-04 18:30 GMT+02:00 Jakub Jelen <jj...@re...>:

> On 10/04/2016 03:56 PM, fra...@gm... wrote:
> > Hi!
> >
> > If I'm not mistaken, we are not exposing a virtual hotplug slot to the
> > application anymore.
>
> Yes, you are right. The master does not show this one. But as far as I
> understand to this problem is not in the virtual hotplug, but in the
> PINs of the card creating the virtual slots, isn't it?
>
> > Slots are only created for actual readers, see
> > https://github.com/OpenSC/OpenSC/blob/master/src/pkcs11/slot.c#L142. I
> > reintroduced the virtual hotplug slot in
> > https://github.com/OpenSC/OpenSC/pull/872, because NSS currently expects
> > that, once created, a slot never disappears.
> >
> > Do you have a link to the one-pin-discussion?
> It was internal/offline discussion, mostly theoretical (based on the
> mails, comments and issues), because I don't have any cards exposing
> more PINs in this way and that would make a difference of the both
> libraries to test.
>
>  From the discussion, what we would like to avoid is to have two
> (basically same) libraries in the OS for several reasons (p11-kit, ...).
> The inception to make the other symlink came in the mailing list more
> than two years ago [1] without any follow up. The pursuing the solution
> without virtual slots (single PIN) sounds reasonable for most of the
> cards. But still I might miss some part of the current behavior so
> correct me if I am wrong.
>
> [1] http://opensc.1086184.n5.nabble.com/opensc-onepin-td14433.html
>
> Regards,
>
> --
> Jakub Jelen
> Security Technologies
> Red Hat
>
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> _______________________________________________
> Opensc-devel mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/opensc-devel
>