opensc/src/pkcs11
sth 49760f9cfb fixed some thread dead-lock bugs
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@930 c6295689-39f2-0310-b995-f0e70906c6a9
2003-02-23 19:38:50 +00:00
..
rsaref Cleanups for initial win32 port, untested. 2002-10-19 14:04:52 +00:00
.cvsignore Add .cvsignore skeleton 2001-12-22 22:11:43 +00:00
Makefile.am - link against libscrandom.a, no libscrandom.la 2003-01-20 09:57:23 +00:00
Makefile.mak - Patches from Stef implementing PKCS11 RNG related functions 2003-01-16 20:10:28 +00:00
README - do not enable the RSA flag n netscape 2002-03-18 12:49:08 +00:00
framework-pkcs15.c - new pkcs15 object creation stuff 2003-02-23 17:50:33 +00:00
framework-pkcs15init.c - Patches from Stef implementing PKCS11 RNG related functions 2003-01-16 20:10:28 +00:00
libpkcs11.c - More win32 fixes from Stef 2002-12-17 20:44:48 +00:00
mechanism.c - fixed typo in previous patch 2003-01-20 09:56:53 +00:00
misc.c added error code CKR_USER_NOT_LOGGED_IN 2003-02-16 18:09:10 +00:00
opensc_pkcs11_install.js Testing version. Use if you dare. 2002-01-28 19:29:35 +00:00
openssl.c - fixed compiled warning 2003-02-03 12:20:24 +00:00
pkcs11-global.c fixed some thread dead-lock bugs 2003-02-23 19:38:50 +00:00
pkcs11-object.c Let C_FindObjectsInit return correctly 2003-02-20 18:54:52 +00:00
pkcs11-session.c - prevent compiler warning 2003-02-21 12:47:30 +00:00
pkcs11.h - New utility library libpkcs11 - supposed to provide easy loading and 2002-12-17 11:48:14 +00:00
sc-pkcs11.h - new pkcs15 object creation stuff 2003-02-23 17:50:33 +00:00
secretkey.c Preliminary MacOS X build support, untested so far. 2002-06-03 15:18:47 +00:00
slot.c - made card_detect() available to everyone 2003-02-17 14:57:51 +00:00

README

Installation
------------

Netscape:
	Select menu: Communicator -> Tools -> Security Info

	Select Cryptographic Modules
	
	Click: Add

	Module name: descriptive name about module (eg. opensc-pkcs11)
	Module file: absolute path of opensc-pkcs11.so

	For proper operation, you also need to configure the module:
	In the Crypthographic Modules dialog, select the OpenSC card,
	and click on the "Config" button to the right. Select the
	"Enable this token" radio button, and select the "Publicly
	readable Certs" button.

	This will ensure that netscape uses the card when trying to
	display encrypted messages in netscape messenger.  Setting
	"Publicly readable Certs" will also stop a pretty annoying habit
	of netscape which is to ask for all PINs when browsing sites
	requiring client authentication.

	You should _not_ select the "RSA" button. If this option is
	selected, netscape will try to use the card for all public key
	operations, and will fail horribly.

Mozilla:
	Make sure Personal Security Manager (PSM) is installed
	(eg. mozilla-psm package is installed).

	Select menu: Edit -> Preferences

	Select category: Privacy & Security -> Certificates

	Click: Manage Security Devices

	Click: Load

	Module name: descriptive name about module (eg. opensc-pkcs11)
	Module file: absolute path of opensc-pkcs11.so


Notes
-----

Netscape seems to show more information about the security module
than mozilla. Otherwise all stuff is untested.