[Opensc-commits] [OpenSC/OpenSC] 389eda: avoid needles PIN prompts and card queries with sc...

[Frank M. <no...@gi...>]

  Branch: refs/heads/master
  Home:   https://github.com/OpenSC/OpenSC
  Commit: 389eda0e1af6cb3c5df06f921946def3a3f33614
      https://github.com/OpenSC/OpenSC/commit/389eda0e1af6cb3c5df06f921946def3a3f33614
  Author: Frank Morgner <fra...@gm...>
  Date:   2026-08-31 (Mon, 31 Aug 2026)

  Changed paths:
    M src/pkcs15init/pkcs15-lib.c

  Log Message:
  -----------
  avoid needles PIN prompts and card queries with sc_pkcs15init_verify_secret


  Commit: 672044bf44387ef5547bcb73a0eaa49fde005759
      https://github.com/OpenSC/OpenSC/commit/672044bf44387ef5547bcb73a0eaa49fde005759
  Author: Frank Morgner <fra...@gm...>
  Date:   2026-08-31 (Mon, 31 Aug 2026)

  Changed paths:
    M src/pkcs11/framework-pkcs15.c

  Log Message:
  -----------
  pkcs11: removed pkcs11init pin callback

This callback (and its dedicated SO PIN caching mechanism) is never
triggered, because the standard PIN caching mechanism, which is checked
*before* executing the callback in `sc_pkcs15init_verify_secret()`
should already have supplied the needed PIN.

The only case where an SO PIN cannot be retrieved from the cache is when
it was previously entered via a PIN pad. It is, however, an undesired
behavior to unexpectidly prompt the user here, because it goes likely
unnoticed. By removing the callback, `sc_pkcs15init_verify_secret()`
will not be triggered to use the PIN pad anymore via PKCS#11.

fixes https://github.com/OpenSC/OpenSC/issues/2933


Compare: https://github.com/OpenSC/OpenSC/compare/a6f4fdc0d406...672044bf4438

To unsubscribe from these emails, change your notification settings at https://github.com/OpenSC/OpenSC/settings/notifications