[Opensc-commits] [OpenSC/OpenSC] f12c76: itacns: simplify ATR matching

[Frank M. <no...@gi...>]

  Branch: refs/heads/master
  Home:   https://github.com/OpenSC/OpenSC
  Commit: f12c766309bcaa4ca1321835938e4dc85ac9535f
      https://github.com/OpenSC/OpenSC/commit/f12c766309bcaa4ca1321835938e4dc85ac9535f
  Author: Frank Morgner <fra...@gm...>
  Date:   2022-11-13 (Sun, 13 Nov 2022)

  Changed paths:
    M src/libopensc/card-itacns.c

  Log Message:
  -----------
  itacns: simplify ATR matching

... and modify internal data only during initialization


  Commit: 0ab6233d0c051624c0d91e41347e352ea0a19201
      https://github.com/OpenSC/OpenSC/commit/0ab6233d0c051624c0d91e41347e352ea0a19201
  Author: Marco Trevisan (Treviño) <ma...@3v...>
  Date:   2022-11-13 (Sun, 13 Nov 2022)

  Changed paths:
    M src/libopensc/card-itacns.c
    M src/libopensc/itacns.h

  Log Message:
  -----------
  card-itacns: Use generic card fields to store hw and fw versions

There's no need to use custom values, while in this way we can expose
such information to the card users


  Commit: cff00cadf40d312bf1b6063d8b237c6638b8280c
      https://github.com/OpenSC/OpenSC/commit/cff00cadf40d312bf1b6063d8b237c6638b8280c
  Author: Marco Trevisan (Treviño) <ma...@3v...>
  Date:   2022-11-13 (Sun, 13 Nov 2022)

  Changed paths:
    M src/libopensc/pkcs15-itacns.c

  Log Message:
  -----------
  pkcs15-itacns: Update mask manufacturers to match last definitions

Gemalto was added in the last reference of CNS –
Carta Nazionale dei Servizi  Functional Specification [1], while
Oberthur is now named IDEMIA.

[1] https://www.agid.gov.it/sites/default/files/repository_files/documentazione_trasparenza/cns_functional_specification_1.1.6_02042011.pdf


  Commit: 5115785acace52bb4e98ade69258b823aa209d9a
      https://github.com/OpenSC/OpenSC/commit/5115785acace52bb4e98ade69258b823aa209d9a
  Author: Marco Trevisan (Treviño) <ma...@3v...>
  Date:   2022-11-13 (Sun, 13 Nov 2022)

  Changed paths:
    M src/libopensc/pkcs15-itacns.c

  Log Message:
  -----------
  pkcs15-itacns: Only add x509 certificate if it is a valid one

In case a card has some contents in the fetched path, but that's not an
X.509 certificate, we're accepting it anyways until it's actually going
to be used, and so will be listed as an available object.

Instead ensure whether this is valid through openssl before adding it.


  Commit: 3365f3a09a77bd95fe781431d6adb7314f7b9e5b
      https://github.com/OpenSC/OpenSC/commit/3365f3a09a77bd95fe781431d6adb7314f7b9e5b
  Author: Marco Trevisan (Treviño) <ma...@3v...>
  Date:   2022-11-13 (Sun, 13 Nov 2022)

  Changed paths:
    M src/libopensc/card-itacns.c

  Log Message:
  -----------
  card-itacns: Support creating random numbers in smaller chunks

Some cards can generate very small random numbers, so perform the action
multiple times to get up to the requested value.

This is handled by OpenSC, when the returned size is just less than
expected.


  Commit: a4eed9597729d7d73f7b17a9264b05ae40b78606
      https://github.com/OpenSC/OpenSC/commit/a4eed9597729d7d73f7b17a9264b05ae40b78606
  Author: Marco Trevisan (Treviño) <ma...@3v...>
  Date:   2022-11-13 (Sun, 13 Nov 2022)

  Changed paths:
    M src/libopensc/card-itacns.c
    M src/libopensc/cards.h
    M src/libopensc/itacns.h
    M src/libopensc/pkcs15-itacns.c

  Log Message:
  -----------
  itacns: Add support for 2021 Idemia CNS cards

New Idemia / Oberthur cards have been provided to people and they use a
slightly different protocol, as per the reverse engineering of the new
protocol, I've adapted the missing bits.

Main key points:
 - Certificate path is 140090012002
 - Public key path is 11001102
 - The certificate has a size of 2048
 - Private key path is 14009002
 - The random number generator can only provide up to 32 bytes, so
   we just request multiple chunks in case a bigger number is requested.

Also, official driver uses chained APDU commands to handle signing
operations, however the card also supports extended APDU, so we can just
use that instead of using chained commands (that would require some
adjustments on the main library)

Fixes: #2445


  Commit: 1708c065f1ff2f754e9756de69ab3a3139a255bb
      https://github.com/OpenSC/OpenSC/commit/1708c065f1ff2f754e9756de69ab3a3139a255bb
  Author: Marco Trevisan (Treviño) <ma...@3v...>
  Date:   2022-11-13 (Sun, 13 Nov 2022)

  Changed paths:
    M src/libopensc/card-itacns.c

  Log Message:
  -----------
  card-itacns: Add NFC ATR for Idemia CNS

When using the card with a NFC reader the ATR is different, so we need
to use hard matching.


  Commit: 47ac0917db94631a10f97112fed69344e6aa2587
      https://github.com/OpenSC/OpenSC/commit/47ac0917db94631a10f97112fed69344e6aa2587
  Author: Frank Morgner <fra...@gm...>
  Date:   2023-04-13 (Thu, 13 Apr 2023)

  Changed paths:
    M src/libopensc/card-itacns.c
    M src/libopensc/cards.h
    M src/libopensc/itacns.h
    M src/libopensc/pkcs15-itacns.c

  Log Message:
  -----------
  Merge pull request #2483 from 3v1n0/itacns-idemia-2021

Updated Italian CNS to support IDEMIA (Oberthur) tokens


Compare: https://github.com/OpenSC/OpenSC/compare/3f485ff28cec...47ac0917db94