Access to public key should not be PIN-authenticated. Especially

since access to certificate (from which one can get public key)
is not currently PIN-authenticated.
This commit is contained in:
Uri Blumenthal 2015-12-21 12:10:46 -05:00
parent 2fd32fdd73
commit 25dae28ab5
1 changed files with 1 additions and 3 deletions

View File

@ -688,9 +688,7 @@ static int read_public_key(void)
if (r >= 0) { if (r >= 0) {
if (verbose) if (verbose)
printf("Reading public key with ID '%s'\n", opt_pubkey); printf("Reading public key with ID '%s'\n", opt_pubkey);
r = authenticate(obj); r = sc_pkcs15_read_pubkey(p15card, obj, &pubkey);
if (r >= 0)
r = sc_pkcs15_read_pubkey(p15card, obj, &pubkey);
} else if (r == SC_ERROR_OBJECT_NOT_FOUND) { } else if (r == SC_ERROR_OBJECT_NOT_FOUND) {
/* No pubkey - try if there's a certificate */ /* No pubkey - try if there's a certificate */
r = sc_pkcs15_find_cert_by_id(p15card, &id, &obj); r = sc_pkcs15_find_cert_by_id(p15card, &id, &obj);