opensc/src/pkcs11
okir 5b1eb43b93 - add some support for card removal in pkcs11
git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@867 c6295689-39f2-0310-b995-f0e70906c6a9
2003-01-19 17:47:07 +00:00
..
rsaref Cleanups for initial win32 port, untested. 2002-10-19 14:04:52 +00:00
.cvsignore Add .cvsignore skeleton 2001-12-22 22:11:43 +00:00
Makefile.am - add some support for card removal in pkcs11 2003-01-19 17:47:07 +00:00
Makefile.mak - Patches from Stef implementing PKCS11 RNG related functions 2003-01-16 20:10:28 +00:00
README - do not enable the RSA flag n netscape 2002-03-18 12:49:08 +00:00
framework-pkcs15.c - Patches from Stef implementing PKCS11 RNG related functions 2003-01-16 20:10:28 +00:00
framework-pkcs15init.c - Patches from Stef implementing PKCS11 RNG related functions 2003-01-16 20:10:28 +00:00
libpkcs11.c - More win32 fixes from Stef 2002-12-17 20:44:48 +00:00
mechanism.c Fix compiler warnings 2003-01-06 23:46:24 +00:00
misc.c - Another go at the empty slot/empty token issue 2003-01-13 21:38:43 +00:00
opensc_pkcs11_install.js Testing version. Use if you dare. 2002-01-28 19:29:35 +00:00
openssl.c - Patches from Stef implementing PKCS11 RNG related functions 2003-01-16 20:10:28 +00:00
pkcs11-global.c - Another go at the empty slot/empty token issue 2003-01-13 21:38:43 +00:00
pkcs11-object.c - Patches from Stef implementing PKCS11 RNG related functions 2003-01-16 20:10:28 +00:00
pkcs11-session.c - do not crash if the application tries to log into a token w/o PIN 2002-11-29 10:54:12 +00:00
pkcs11.h - New utility library libpkcs11 - supposed to provide easy loading and 2002-12-17 11:48:14 +00:00
sc-pkcs11.h - Patches from Stef implementing PKCS11 RNG related functions 2003-01-16 20:10:28 +00:00
secretkey.c Preliminary MacOS X build support, untested so far. 2002-06-03 15:18:47 +00:00
slot.c - add some support for card removal in pkcs11 2003-01-19 17:47:07 +00:00

README

Installation
------------

Netscape:
	Select menu: Communicator -> Tools -> Security Info

	Select Cryptographic Modules
	
	Click: Add

	Module name: descriptive name about module (eg. opensc-pkcs11)
	Module file: absolute path of opensc-pkcs11.so

	For proper operation, you also need to configure the module:
	In the Crypthographic Modules dialog, select the OpenSC card,
	and click on the "Config" button to the right. Select the
	"Enable this token" radio button, and select the "Publicly
	readable Certs" button.

	This will ensure that netscape uses the card when trying to
	display encrypted messages in netscape messenger.  Setting
	"Publicly readable Certs" will also stop a pretty annoying habit
	of netscape which is to ask for all PINs when browsing sites
	requiring client authentication.

	You should _not_ select the "RSA" button. If this option is
	selected, netscape will try to use the card for all public key
	operations, and will fail horribly.

Mozilla:
	Make sure Personal Security Manager (PSM) is installed
	(eg. mozilla-psm package is installed).

	Select menu: Edit -> Preferences

	Select category: Privacy & Security -> Certificates

	Click: Manage Security Devices

	Click: Load

	Module name: descriptive name about module (eg. opensc-pkcs11)
	Module file: absolute path of opensc-pkcs11.so


Notes
-----

Netscape seems to show more information about the security module
than mozilla. Otherwise all stuff is untested.