Commit Graph

83 Commits

Author SHA1 Message Date
sth c46b58fa34 Moved the cardinfo file to the pkcs15 DF, changed it's FID to 4946, and protected it against unauthorized changes
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1647 c6295689-39f2-0310-b995-f0e70906c6a9
2003-12-02 15:51:52 +00:00
okir b6796d0404 - fixed suppress_error handling in sc_pkcs15init_write_info
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1638 c6295689-39f2-0310-b995-f0e70906c6a9
2003-11-25 10:37:23 +00:00
okir 22312dbe17 - set ACLs on the profile info file
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1637 c6295689-39f2-0310-b995-f0e70906c6a9
2003-11-24 10:21:36 +00:00
okir 961e116006 - Support direct encoding of certificates
- Allow more than one profile option (e.g. pkcs15+small+direct-cert)
- While creating the basic pcks15 structure, store profile options
  in a special file on the card (3F002F01). All susequent operations
  (adding PINs etc) will use this information instead of what's
  given on the command line.


git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1615 c6295689-39f2-0310-b995-f0e70906c6a9
2003-11-19 20:37:02 +00:00
okir 728a6a4ade - Another broken commit message :-/
What the previous commit was all about:
  If we store a pkcs12 files on the card, it stores a key @45,
  and a CA certs @46. When storing another p12 file, we must make
  sure we don't grab the next free key ID (46), because the
  corresponding CERT ID is already taken. We must skip all IDs for
  which a key or cert exists.


git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1574 c6295689-39f2-0310-b995-f0e70906c6a9
2003-10-30 11:47:37 +00:00
okir 60892cd0a3 - added recommendation about 2 cert/key pairs
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1570 c6295689-39f2-0310-b995-f0e70906c6a9
2003-10-30 11:13:11 +00:00
okir 8a5f130af8 - do an sc_select_file inside do_get_pin_and_verify in case we called
a pkcs15 function that enumerated the AODF


git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1558 c6295689-39f2-0310-b995-f0e70906c6a9
2003-10-22 05:43:57 +00:00
okir ae2cfe8a46 - sc_pkcs15_find_pin_by_reference now searches by reference _and_path_
- profile->p15_card renamed to p15_spec, as it reflects what _should_
  be on the card
- added profile->p15_data, which is what _is_ on the card
- make do_get_pin_and_verify use the sc_pkcs15_find_pin_by_reference
  properly.


git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1549 c6295689-39f2-0310-b995-f0e70906c6a9
2003-10-21 11:05:35 +00:00
okir 8740ced3ee - dont pin protect pubkey
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1541 c6295689-39f2-0310-b995-f0e70906c6a9
2003-10-18 17:02:44 +00:00
okir 2a12ed3108 - Prepare for userConsent support: changed ops->create_pin to take
a sc_pkcs15_object_t instead of sc_pkcs15_pin_info_t argument.


git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1534 c6295689-39f2-0310-b995-f0e70906c6a9
2003-10-17 11:21:48 +00:00
okir afcf39c6dd - some more cleanup
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1532 c6295689-39f2-0310-b995-f0e70906c6a9
2003-10-16 14:32:42 +00:00
okir 574d6f38ee - added debian packaging files from Joe Phillips
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1530 c6295689-39f2-0310-b995-f0e70906c6a9
2003-10-16 11:41:24 +00:00
okir 09cd60504d - one suppress_errors-- too many
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1528 c6295689-39f2-0310-b995-f0e70906c6a9
2003-10-15 09:36:53 +00:00
aet eaf1f7afda - Remove old callback error/debug functions
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1523 c6295689-39f2-0310-b995-f0e70906c6a9
2003-10-14 10:42:03 +00:00
okir f552395705 - Error logging changes: replace ctx->log_errors with ctx->suppress_errors
- remove error/debug callbacks; always use sc_error/sc_debug


git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1519 c6295689-39f2-0310-b995-f0e70906c6a9
2003-10-14 09:57:29 +00:00
okir aad883149e - removed some dead code inside #if 0/#endif
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1514 c6295689-39f2-0310-b995-f0e70906c6a9
2003-10-14 08:17:59 +00:00
aet 936ad78b02 - Some build/portability fixes for the pkcs15init rewrite
- Add sc_pkcs15_get_<drv>_ops(), yet untested


git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1512 c6295689-39f2-0310-b995-f0e70906c6a9
2003-10-13 20:41:00 +00:00
sth b66e24bf55 Small changes to make it work on non-C99 compilers
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1510 c6295689-39f2-0310-b995-f0e70906c6a9
2003-10-13 20:16:40 +00:00
okir 23c1e81512 - pkcs15 rewrite
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1508 c6295689-39f2-0310-b995-f0e70906c6a9
2003-10-13 16:13:12 +00:00
sth 2457faa1e7 Fix: when doing a sc_pkcs15init_generate_key(), the auth_id for the public key wasn't put into the PuKDF
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1489 c6295689-39f2-0310-b995-f0e70906c6a9
2003-10-02 12:21:12 +00:00
sth 509119ac3b Correctly add the label to a pkcs15 data object
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1487 c6295689-39f2-0310-b995-f0e70906c6a9
2003-10-02 09:18:12 +00:00
aet 0c37fe2f79 Warning fix
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1428 c6295689-39f2-0310-b995-f0e70906c6a9
2003-09-06 19:18:38 +00:00
aet 597877eb49 Move #include <windows.h> to winconfig.h in
order to minimize win32 specific code sections.


git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1411 c6295689-39f2-0310-b995-f0e70906c6a9
2003-09-03 18:18:57 +00:00
sth 093adc8c89 Fix: don't DER-en/decode the data in a pkcs15 object
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1385 c6295689-39f2-0310-b995-f0e70906c6a9
2003-08-20 14:15:02 +00:00
aj 1091548eda seperator is written to an u8, so it should be a char or u8 anyway.
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1324 c6295689-39f2-0310-b995-f0e70906c6a9
2003-08-01 07:03:16 +00:00
okir 3a68ba695b - warn if EF is too small for the amount of data we want to write
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1323 c6295689-39f2-0310-b995-f0e70906c6a9
2003-07-31 21:16:15 +00:00
sth 82c00d806c Placing #include <windows.h> in wincofig.h causes compiler problems, better put it in each file that uses _MAX_PATH
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1234 c6295689-39f2-0310-b995-f0e70906c6a9
2003-06-27 12:59:22 +00:00
sth 5ed3d17ad8 Added sc_pkcs15init_change_attrib() that can change the label and ID of a pkcs15 key or cert
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1229 c6295689-39f2-0310-b995-f0e70906c6a9
2003-06-27 11:59:37 +00:00
aj 59da343eea PATH_MAX is defined via limits.h (I hope that exists on all
systems). MAX_PATH is a typo. int r was never used.


git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1223 c6295689-39f2-0310-b995-f0e70906c6a9
2003-06-25 10:19:08 +00:00
sth 97da0b6149 Now you can specify your card profile for pkcs15init, both on the command line if you use the pkcs15init tool and in the opensc.conf file. Not specifying gives the default one, like before.
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1212 c6295689-39f2-0310-b995-f0e70906c6a9
2003-06-18 08:07:12 +00:00
sth 694a649ab8 Add the AuthID when writing pkcs15 data objects
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1196 c6295689-39f2-0310-b995-f0e70906c6a9
2003-06-12 21:23:01 +00:00
sth 5716f100cc Fixed a type in previous patch
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1183 c6295689-39f2-0310-b995-f0e70906c6a9
2003-06-04 18:37:52 +00:00
sth c8c2cf725b First implementation of C_GenerateKeyPair()
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1179 c6295689-39f2-0310-b995-f0e70906c6a9
2003-06-03 13:57:52 +00:00
okir 3e30e87cbd - do_get_any_verify_pin: try to look up p15 pin info from card
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1151 c6295689-39f2-0310-b995-f0e70906c6a9
2003-05-18 10:05:14 +00:00
okir a496e8e42b - added sc_pkcs15init_set_secret
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1146 c6295689-39f2-0310-b995-f0e70906c6a9
2003-05-17 09:10:32 +00:00
okir 8c7e571c89 - erase card fixes: forget cached secrets, and use sc_free_apps
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1123 c6295689-39f2-0310-b995-f0e70906c6a9
2003-05-15 13:33:04 +00:00
okir 7b34c2ecf7 - get_pin callback now takes additional label argument
- call get_pin for ALL pins, not just those listed in the profile
- add split key support to sc_pkcs15init_generate_key


git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1116 c6295689-39f2-0310-b995-f0e70906c6a9
2003-05-15 11:30:46 +00:00
aj 131719b8c6 - add robert to Authors as contributor of bug fixes
- configure code finally working.
   engine is detected and path to libcrypto.a is also set.
 - roberts fix for reader-usbtoken.c
 - card-gpk.c migraton to DES_ routines with #define for 0.9.6 openssl.
 - man pages: do not ship pkcs15-profile.5 (.in is in the tarfile)
 - assuan: replace "strcpy(stpcpy(.., ..), ..)" with
   "strcat(strcpy(.., ..), ..)" which looks good, but nobody uses
   assuan I guess ?
 - declaration of sc_pkcs15init_set_lifecycle kills a warning
 - #include <openssl/bn.h> kills a warning (or compile problem?)
 - removed unused txt[256]; from p15_eid (kills a warning)
 - now "ln -s" the signer plugin to the plugin directory.
 - moved key_out direction to the beginning of a function (kills
   a warning or compile error)
 - changed pkcs11-tool option "quiet" to "verbose" to conform to
   other tools.
 - made algo argument to wrap_unwrap a "const" (kills several warnings)


git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1063 c6295689-39f2-0310-b995-f0e70906c6a9
2003-04-22 17:00:38 +00:00
okir d2075b2c13 - implemented split-key support for CardOS
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1038 c6295689-39f2-0310-b995-f0e70906c6a9
2003-04-17 12:38:08 +00:00
okir f81929eb16 - moved the lifecycle stuff to libpkcs15init
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@1024 c6295689-39f2-0310-b995-f0e70906c6a9
2003-04-16 14:38:35 +00:00
sth a7a5701e0c added support for max pin length
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@922 c6295689-39f2-0310-b995-f0e70906c6a9
2003-02-20 23:19:01 +00:00
okir b86d2e994b - First shot at pkcs15 data objects from Danny De Cock
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@788 c6295689-39f2-0310-b995-f0e70906c6a9
2002-12-18 10:17:01 +00:00
okir e9c8806c75 - properly set the TokenInfo label from user input
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@752 c6295689-39f2-0310-b995-f0e70906c6a9
2002-12-04 14:56:17 +00:00
okir 27c2369cee - make sure we don't assign the same ID more than once
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@749 c6295689-39f2-0310-b995-f0e70906c6a9
2002-12-04 13:25:31 +00:00
okir eaebdec8b0 - Change the way we handle default transport keys, attempt to reduce the
risk of users entering the wrong keys and locking their cards. Here's how
  we do it:
   - ask the card driver (via cardctl GET_DEFAULT_KEY) for default key
   - invoke the front-end's get_key callback. If the card driver gave us
     a default key, pass it as default value
   - front end is free to use default key as-is, or prompt user


git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@743 c6295689-39f2-0310-b995-f0e70906c6a9
2002-12-04 11:56:34 +00:00
okir 8ee38b9567 - handle SC_ALGORITHM_NEED_USAGE flag
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@706 c6295689-39f2-0310-b995-f0e70906c6a9
2002-11-08 14:14:28 +00:00
aet 1d2c9e4c48 Cleanups for initial win32 port, untested.
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@696 c6295689-39f2-0310-b995-f0e70906c6a9
2002-10-19 14:04:52 +00:00
okir 638a5b307c - implemented generic erase_card functionality
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@667 c6295689-39f2-0310-b995-f0e70906c6a9
2002-06-18 18:18:21 +00:00
okir 5b40de43ed - various changes for on-board key generation
- key download and key generation for eToken works now


git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@659 c6295689-39f2-0310-b995-f0e70906c6a9
2002-06-17 10:58:04 +00:00
okir 954cfb9f8e - first steps toward eToken key download
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@640 c6295689-39f2-0310-b995-f0e70906c6a9
2002-06-07 20:29:07 +00:00