Menu
▾
▴
opensc-devel
|
From: Ian H. <we...@us...> - 2018-01-06 18:23:33
Attachments:
output.txt
|
Hi I have the following card which I have managed to find with libccid, however, it is not supported by OpenSC. $ opensc-tool --atr Using reader with a card: FT U2F CCID [CCID] 00 00 3b:f9:13:00:00:81:31:fe:45:4a:43:4f:50:32:34:32:52:33:a2 Is there a driver in the works, or can I help with any information? Ian |
|
From: Bernd E. <ec...@zu...> - 2018-01-06 20:28:17
|
Sounds like Fido Universal Two Factor. Chrome should be able to use that as a login token. (There is for example a Yubikey U2F Token which works great with Chrome) Gruss Bernd -- http://bernd.eckenfels.net ________________________________ From: Ian Hill <we...@us...> Sent: Saturday, January 6, 2018 6:57:03 PM To: ope...@li... Subject: [Opensc-devel] Feitian U2F NFC + CCID (FT U2F CCID) Hi I have the following card which I have managed to find with libccid, however, it is not supported by OpenSC. $ opensc-tool --atr Using reader with a card: FT U2F CCID [CCID] 00 00 3b:f9:13:00:00:81:31:fe:45:4a:43:4f:50:32:34:32:52:33:a2 Is there a driver in the works, or can I help with any information? Ian |
|
From: Ian H. <we...@us...> - 2018-01-06 21:20:37
|
Yep, it's the U2F version and that works fine, however, I would like to add gpg keys to it and have enabled U2F & CCID mode. It is now recognised by libccid using the latest stable version but not recognised by Opensc. I assume if I can get Opensc working I should be able to add either gpg or RSA keys to the smart card. On Sat, 6 Jan 2018, 7:57 pm Bernd Eckenfels, <ec...@zu...> wrote: > Sounds like Fido Universal Two Factor. Chrome should be able to use that > as a login token. (There is for example a Yubikey U2F Token which works > great with Chrome) > > Gruss > Bernd > -- > http://bernd.eckenfels.net > ------------------------------ > *From:* Ian Hill <we...@us...> > *Sent:* Saturday, January 6, 2018 6:57:03 PM > *To:* ope...@li... > *Subject:* [Opensc-devel] Feitian U2F NFC + CCID (FT U2F CCID) > > Hi > > I have the following card which I have managed to find with libccid, > however, it is not supported by OpenSC. > > $ opensc-tool --atr > Using reader with a card: FT U2F CCID [CCID] 00 00 > 3b:f9:13:00:00:81:31:fe:45:4a:43:4f:50:32:34:32:52:33:a2 > > > Is there a driver in the works, or can I help with any information? > > > Ian > > > > > |
|
From: Frank M. <fra...@gm...> - 2018-01-07 13:58:33
|
U2F is yet an other token standard. So, by design, it is not to be used with the APIs that OpenSC is offering. However, that should not be a problem, because U2F capable applications should have native support for your token without the need of OpenSC. In theory we could add low level support for U2F and even some PKCS#11 wrapping for U2F into OpenSC. But currently there are no applications that have use for this. 2018-01-06 22:20 GMT+01:00 Ian Hill <we...@us...>: > Yep, it's the U2F version and that works fine, however, I would like to > add gpg keys to it and have enabled U2F & CCID mode. > > It is now recognised by libccid using the latest stable version but not > recognised by Opensc. > > I assume if I can get Opensc working I should be able to add either gpg or > RSA keys to the smart card. > > On Sat, 6 Jan 2018, 7:57 pm Bernd Eckenfels, <ec...@zu...> > wrote: > >> Sounds like Fido Universal Two Factor. Chrome should be able to use that >> as a login token. (There is for example a Yubikey U2F Token which works >> great with Chrome) >> >> Gruss >> Bernd >> -- >> http://bernd.eckenfels.net >> ------------------------------ >> *From:* Ian Hill <we...@us...> >> *Sent:* Saturday, January 6, 2018 6:57:03 PM >> *To:* ope...@li... >> *Subject:* [Opensc-devel] Feitian U2F NFC + CCID (FT U2F CCID) >> >> Hi >> >> I have the following card which I have managed to find with libccid, >> however, it is not supported by OpenSC. >> >> $ opensc-tool --atr >> Using reader with a card: FT U2F CCID [CCID] 00 00 >> 3b:f9:13:00:00:81:31:fe:45:4a:43:4f:50:32:34:32:52:33:a2 >> >> >> Is there a driver in the works, or can I help with any information? >> >> >> Ian >> >> >> >> >> > ------------------------------------------------------------ > ------------------ > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! http://sdm.link/slashdot > _______________________________________________ > Opensc-devel mailing list > Ope...@li... > https://lists.sourceforge.net/lists/listinfo/opensc-devel > > |
|
From: Ian H. <we...@us...> - 2018-01-07 21:52:56
|
Thanks, this usb supports both U2F and CCID, the U2F works as expected, however, having enabled the CCID mode although it is recognised as a CCID card under libccid there is no suitable driver in Opensc. If anyone can help with the driver I can test it this end. On Sun, 7 Jan 2018, 1:58 pm Frank Morgner, <fra...@gm...> wrote: > U2F is yet an other token standard. So, by design, it is not to be used > with the APIs that OpenSC is offering. However, that should not be a > problem, because U2F capable applications should have native support for > your token without the need of OpenSC. > > > In theory we could add low level support for U2F and even some PKCS#11 > wrapping for U2F into OpenSC. But currently there are no applications that > have use for this. > > 2018-01-06 22:20 GMT+01:00 Ian Hill <we...@us...>: > >> Yep, it's the U2F version and that works fine, however, I would like to >> add gpg keys to it and have enabled U2F & CCID mode. >> >> It is now recognised by libccid using the latest stable version but not >> recognised by Opensc. >> >> I assume if I can get Opensc working I should be able to add either gpg >> or RSA keys to the smart card. >> >> On Sat, 6 Jan 2018, 7:57 pm Bernd Eckenfels, <ec...@zu...> >> wrote: >> >>> Sounds like Fido Universal Two Factor. Chrome should be able to use that >>> as a login token. (There is for example a Yubikey U2F Token which works >>> great with Chrome) >>> >>> Gruss >>> Bernd >>> -- >>> http://bernd.eckenfels.net >>> ------------------------------ >>> *From:* Ian Hill <we...@us...> >>> *Sent:* Saturday, January 6, 2018 6:57:03 PM >>> *To:* ope...@li... >>> *Subject:* [Opensc-devel] Feitian U2F NFC + CCID (FT U2F CCID) >>> >>> Hi >>> >>> I have the following card which I have managed to find with libccid, >>> however, it is not supported by OpenSC. >>> >>> $ opensc-tool --atr >>> Using reader with a card: FT U2F CCID [CCID] 00 00 >>> 3b:f9:13:00:00:81:31:fe:45:4a:43:4f:50:32:34:32:52:33:a2 >>> >>> >>> Is there a driver in the works, or can I help with any information? >>> >>> >>> Ian >>> >>> >>> >>> >>> >> >> ------------------------------------------------------------------------------ >> Check out the vibrant tech community on one of the world's most >> engaging tech sites, Slashdot.org! http://sdm.link/slashdot >> _______________________________________________ >> Opensc-devel mailing list >> Ope...@li... >> https://lists.sourceforge.net/lists/listinfo/opensc-devel >> >> > |
|
From: Bernd E. <ec...@zu...> - 2018-01-07 22:10:38
|
You cannot store certificates or keys on a U2F only device, it only supports the U2F features for key derivation. Gruss Bernd -- http://bernd.eckenfels.net ________________________________ From: Ian Hill <we...@us...> Sent: Sunday, January 7, 2018 10:27:39 PM To: Frank Morgner Cc: Bernd Eckenfels; ope...@li... Subject: Re: [Opensc-devel] Feitian U2F NFC + CCID (FT U2F CCID) Thanks, this usb supports both U2F and CCID, the U2F works as expected, however, having enabled the CCID mode although it is recognised as a CCID card under libccid there is no suitable driver in Opensc. If anyone can help with the driver I can test it this end. On Sun, 7 Jan 2018, 1:58 pm Frank Morgner, <fra...@gm...<mailto:fra...@gm...>> wrote: U2F is yet an other token standard. So, by design, it is not to be used with the APIs that OpenSC is offering. However, that should not be a problem, because U2F capable applications should have native support for your token without the need of OpenSC. In theory we could add low level support for U2F and even some PKCS#11 wrapping for U2F into OpenSC. But currently there are no applications that have use for this. 2018-01-06 22:20 GMT+01:00 Ian Hill <we...@us...<mailto:we...@us...>>: Yep, it's the U2F version and that works fine, however, I would like to add gpg keys to it and have enabled U2F & CCID mode. It is now recognised by libccid using the latest stable version but not recognised by Opensc. I assume if I can get Opensc working I should be able to add either gpg or RSA keys to the smart card. On Sat, 6 Jan 2018, 7:57 pm Bernd Eckenfels, <ec...@zu...<mailto:ec...@zu...>> wrote: Sounds like Fido Universal Two Factor. Chrome should be able to use that as a login token. (There is for example a Yubikey U2F Token which works great with Chrome) Gruss Bernd -- http://bernd.eckenfels.net ________________________________ From: Ian Hill <we...@us...<mailto:we...@us...>> Sent: Saturday, January 6, 2018 6:57:03 PM To: ope...@li...<mailto:ope...@li...> Subject: [Opensc-devel] Feitian U2F NFC + CCID (FT U2F CCID) Hi I have the following card which I have managed to find with libccid, however, it is not supported by OpenSC. $ opensc-tool --atr Using reader with a card: FT U2F CCID [CCID] 00 00 3b:f9:13:00:00:81:31:fe:45:4a:43:4f:50:32:34:32:52:33:a2 Is there a driver in the works, or can I help with any information? Ian ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Opensc-devel mailing list Ope...@li...<mailto:Ope...@li...> https://lists.sourceforge.net/lists/listinfo/opensc-devel |
|
From: Ian H. <we...@us...> - 2018-01-07 22:20:09
|
Thanks, I know that, however with this usb key you can also enable smart card mode (CCID) as well using the Feitian application, which I have done. Similar to the Yubikey 4 and Neo. The output file I attached previously shows that the usb is a valid CCID smart card and Ludovic of libccid has this usb on his 'should work's list. The only issue seems to be that there is not a Opensc driver, perhaps based on an update to the Feitian ePass2003 usb smart card. Note this is totally separate to U2F mode, which I can actually disable if required. On Sun, 7 Jan 2018, 10:11 pm Bernd Eckenfels, <ec...@zu...> wrote: > You cannot store certificates or keys on a U2F only device, it only > supports the U2F features for key derivation. > > Gruss > Bernd > -- > http://bernd.eckenfels.net > ------------------------------ > *From:* Ian Hill <we...@us...> > *Sent:* Sunday, January 7, 2018 10:27:39 PM > *To:* Frank Morgner > *Cc:* Bernd Eckenfels; ope...@li... > *Subject:* Re: [Opensc-devel] Feitian U2F NFC + CCID (FT U2F CCID) > > > Thanks, this usb supports both U2F and CCID, the U2F works as expected, > however, having enabled the CCID mode although it is recognised as a CCID > card under libccid there is no suitable driver in Opensc. > > If anyone can help with the driver I can test it this end. > > On Sun, 7 Jan 2018, 1:58 pm Frank Morgner, <fra...@gm...> wrote: > >> U2F is yet an other token standard. So, by design, it is not to be used >> with the APIs that OpenSC is offering. However, that should not be a >> problem, because U2F capable applications should have native support for >> your token without the need of OpenSC. >> >> >> In theory we could add low level support for U2F and even some PKCS#11 >> wrapping for U2F into OpenSC. But currently there are no applications that >> have use for this. >> >> 2018-01-06 22:20 GMT+01:00 Ian Hill <we...@us...>: >> >>> Yep, it's the U2F version and that works fine, however, I would like to >>> add gpg keys to it and have enabled U2F & CCID mode. >>> >>> It is now recognised by libccid using the latest stable version but not >>> recognised by Opensc. >>> >>> I assume if I can get Opensc working I should be able to add either gpg >>> or RSA keys to the smart card. >>> >>> On Sat, 6 Jan 2018, 7:57 pm Bernd Eckenfels, <ec...@zu...> >>> wrote: >>> >>>> Sounds like Fido Universal Two Factor. Chrome should be able to use >>>> that as a login token. (There is for example a Yubikey U2F Token which >>>> works great with Chrome) >>>> >>>> Gruss >>>> Bernd >>>> -- >>>> http://bernd.eckenfels.net >>>> ------------------------------ >>>> *From:* Ian Hill <we...@us...> >>>> *Sent:* Saturday, January 6, 2018 6:57:03 PM >>>> *To:* ope...@li... >>>> *Subject:* [Opensc-devel] Feitian U2F NFC + CCID (FT U2F CCID) >>>> >>>> Hi >>>> >>>> I have the following card which I have managed to find with libccid, >>>> however, it is not supported by OpenSC. >>>> >>>> $ opensc-tool --atr >>>> Using reader with a card: FT U2F CCID [CCID] 00 00 >>>> 3b:f9:13:00:00:81:31:fe:45:4a:43:4f:50:32:34:32:52:33:a2 >>>> >>>> >>>> Is there a driver in the works, or can I help with any information? >>>> >>>> >>>> Ian >>>> >>>> >>>> >>>> >>>> >>> >>> ------------------------------------------------------------------------------ >>> Check out the vibrant tech community on one of the world's most >>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot >>> _______________________________________________ >>> Opensc-devel mailing list >>> Ope...@li... >>> https://lists.sourceforge.net/lists/listinfo/opensc-devel >>> >>> >> > ------------------------------------------------------------------------------ > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! http://sdm.link/slashdot > _______________________________________________ > Opensc-devel mailing list > Ope...@li... > https://lists.sourceforge.net/lists/listinfo/opensc-devel > |
|
From: Frank M. <fra...@gm...> - 2018-01-08 07:17:12
|
According to the docs there aren't any PKI applications (e.g. GIDS) on your token by default (https://www.ftsafe.com/products/FIDO/Single_Button_FIDO). You need to contact the vendor instead of this list. 2018-01-07 23:19 GMT+01:00 Ian Hill <we...@us...>: > Thanks, I know that, however with this usb key you can also enable smart > card mode (CCID) as well using the Feitian application, which I have done. > Similar to the Yubikey 4 and Neo. > > The output file I attached previously shows that the usb is a valid CCID > smart card and Ludovic of libccid has this usb on his 'should work's list. > The only issue seems to be that there is not a Opensc driver, perhaps based > on an update to the Feitian ePass2003 usb smart card. > > Note this is totally separate to U2F mode, which I can actually disable if > required. > > On Sun, 7 Jan 2018, 10:11 pm Bernd Eckenfels, <ec...@zu...> > wrote: > >> You cannot store certificates or keys on a U2F only device, it only >> supports the U2F features for key derivation. >> >> Gruss >> Bernd >> -- >> http://bernd.eckenfels.net >> ------------------------------ >> *From:* Ian Hill <we...@us...> >> *Sent:* Sunday, January 7, 2018 10:27:39 PM >> *To:* Frank Morgner >> *Cc:* Bernd Eckenfels; ope...@li... >> *Subject:* Re: [Opensc-devel] Feitian U2F NFC + CCID (FT U2F CCID) >> >> >> Thanks, this usb supports both U2F and CCID, the U2F works as expected, >> however, having enabled the CCID mode although it is recognised as a CCID >> card under libccid there is no suitable driver in Opensc. >> >> If anyone can help with the driver I can test it this end. >> >> On Sun, 7 Jan 2018, 1:58 pm Frank Morgner, <fra...@gm...> >> wrote: >> >>> U2F is yet an other token standard. So, by design, it is not to be used >>> with the APIs that OpenSC is offering. However, that should not be a >>> problem, because U2F capable applications should have native support for >>> your token without the need of OpenSC. >>> >>> >>> In theory we could add low level support for U2F and even some PKCS#11 >>> wrapping for U2F into OpenSC. But currently there are no applications that >>> have use for this. >>> >>> 2018-01-06 22:20 GMT+01:00 Ian Hill <we...@us...>: >>> >>>> Yep, it's the U2F version and that works fine, however, I would like to >>>> add gpg keys to it and have enabled U2F & CCID mode. >>>> >>>> It is now recognised by libccid using the latest stable version but not >>>> recognised by Opensc. >>>> >>>> I assume if I can get Opensc working I should be able to add either gpg >>>> or RSA keys to the smart card. >>>> >>>> On Sat, 6 Jan 2018, 7:57 pm Bernd Eckenfels, <ec...@zu...> >>>> wrote: >>>> >>>>> Sounds like Fido Universal Two Factor. Chrome should be able to use >>>>> that as a login token. (There is for example a Yubikey U2F Token which >>>>> works great with Chrome) >>>>> >>>>> Gruss >>>>> Bernd >>>>> -- >>>>> http://bernd.eckenfels.net >>>>> ------------------------------ >>>>> *From:* Ian Hill <we...@us...> >>>>> *Sent:* Saturday, January 6, 2018 6:57:03 PM >>>>> *To:* ope...@li... >>>>> *Subject:* [Opensc-devel] Feitian U2F NFC + CCID (FT U2F CCID) >>>>> >>>>> Hi >>>>> >>>>> I have the following card which I have managed to find with libccid, >>>>> however, it is not supported by OpenSC. >>>>> >>>>> $ opensc-tool --atr >>>>> Using reader with a card: FT U2F CCID [CCID] 00 00 >>>>> 3b:f9:13:00:00:81:31:fe:45:4a:43:4f:50:32:34:32:52:33:a2 >>>>> >>>>> >>>>> Is there a driver in the works, or can I help with any information? >>>>> >>>>> >>>>> Ian >>>>> >>>>> >>>>> >>>>> >>>>> >>>> ------------------------------------------------------------ >>>> ------------------ >>>> Check out the vibrant tech community on one of the world's most >>>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot >>>> _______________________________________________ >>>> Opensc-devel mailing list >>>> Ope...@li... >>>> https://lists.sourceforge.net/lists/listinfo/opensc-devel >>>> >>>> >>> ------------------------------------------------------------ >> ------------------ >> Check out the vibrant tech community on one of the world's most >> engaging tech sites, Slashdot.org! http://sdm.link/slashdot______ >> _________________________________________ >> Opensc-devel mailing list >> Ope...@li... >> https://lists.sourceforge.net/lists/listinfo/opensc-devel >> > > ------------------------------------------------------------ > ------------------ > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! http://sdm.link/slashdot > _______________________________________________ > Opensc-devel mailing list > Ope...@li... > https://lists.sourceforge.net/lists/listinfo/opensc-devel > > |
|
From: Jakub J. <jj...@re...> - 2018-01-08 09:15:13
|
On Sat, 2018-01-06 at 17:57 +0000, Ian Hill wrote: > Hi > > I have the following card which I have managed to find with libccid, > however, it is not supported by OpenSC. > > $ opensc-tool --atr > Using reader with a card: FT U2F CCID [CCID] 00 00 > 3b:f9:13:00:00:81:31:fe:45:4a:43:4f:50:32:34:32:52:33:a2 > > > Is there a driver in the works, or can I help with any information? Did you try with the latest master? There were some changes related to the epass2003 driver (Feitian) that might be related. If it will not help, the vendor should be able to help you. Regards, -- Jakub Jelen Software Engineer Security Technologies Red Hat, Inc. |
×
Want the latest updates on software, tech news, and AI?
Get latest updates about software, tech news, and AI from SourceForge directly in your inbox once a month.
Thanks for helping keep SourceForge clean.
X