[Opensc-commits] [OpenSC/OpenSC] a77145: From the PKCS#11 specification chapter C_SetPIN:

[Lars S. <no...@gi...>]

  Branch: refs/heads/master
  Home:   https://github.com/OpenSC/OpenSC
  Commit: a771450ab20318d7d85801b42852b709e2d459c6
      https://github.com/OpenSC/OpenSC/commit/a771450ab20318d7d85801b42852b709e2d459c6
  Author: Lars Silvén <lar...@pr...>
  Date:   2020-04-08 (Wed, 08 Apr 2020)

  Changed paths:
    M src/pkcs11/framework-pkcs15.c

  Log Message:
  -----------
  From the PKCS#11 specification chapter C_SetPIN:
C_SetPIN modifies the PIN of the user that is currently logged in, or
the CKU_USER PIN if the session is not logged in. ....

This was not true for "if the session is not logged in" before this fix.


  Commit: 8257e0186dfa3a501f680d33015c6f26f52533d6
      https://github.com/OpenSC/OpenSC/commit/8257e0186dfa3a501f680d33015c6f26f52533d6
  Author: Lars Silvén <lar...@pr...>
  Date:   2020-04-08 (Wed, 08 Apr 2020)

  Changed paths:
    M src/pkcs11/framework-pkcs15.c
    M src/tools/pkcs11-tool.c

  Log Message:
  -----------
  The PKCS#11 specifies that the PIN parameter(s) in C_Login and C_SetPIN
always should be used, even if a PIN pad reader is used. PIN must only
be fetched from the PIN pad reader if the corresponding parameter is
null.
Before this commit PIN was always fetch from the reader if the PIN could
be fetched from the reader.
The 'pkcs11-tool has also been updated. Before parameters was never
taken from the command line if a PID pad reader was used. Now PINs from
the command line is always used but if not existing the PIN is fetched
from the reader if a reader with a PIN pad is used, otherwise the user
is prompted for PIN(s) from the CLI.


Compare: https://github.com/OpenSC/OpenSC/compare/f9b31e50dd42...8257e0186dfa