opensc/src/pkcs11
2003-01-06 19:52:11 +00:00
..
rsaref
.cvsignore
framework-pkcs15.c - pin pad changes from Stef 2003-01-06 19:28:48 +00:00
framework-pkcs15init.c - Another fix to mechanism handling: ripemd160 signatures should work now 2002-12-19 09:27:08 +00:00
libpkcs11.c - More win32 fixes from Stef 2002-12-17 20:44:48 +00:00
Makefile.am - New mechanism framework 2002-12-17 11:48:54 +00:00
Makefile.mak - Win32 fixes in case openssl is not present (Stef) 2003-01-06 19:52:11 +00:00
mechanism.c - C_Sign* and C_Digest* now return the proper codes when the output buffer 2003-01-03 14:28:50 +00:00
misc.c - pin pad changes from Stef 2003-01-06 19:28:48 +00:00
opensc_pkcs11_install.js
openssl.c - Win32 fixes in case openssl is not present (Stef) 2003-01-06 19:52:11 +00:00
pkcs11-global.c - Try to fix pkcs11.hide_empty_slots 2003-01-03 11:40:11 +00:00
pkcs11-object.c - C_Sign* and C_Digest* now return the proper codes when the output buffer 2003-01-03 14:28:50 +00:00
pkcs11-session.c
pkcs11.h - New utility library libpkcs11 - supposed to provide easy loading and 2002-12-17 11:48:14 +00:00
README
sc-pkcs11.h - C_Sign* and C_Digest* now return the proper codes when the output buffer 2003-01-03 14:28:50 +00:00
secretkey.c
slot.c - Allow the admin to configure how many slots are used per card 2002-12-21 16:45:37 +00:00

Installation
------------

Netscape:
	Select menu: Communicator -> Tools -> Security Info

	Select Cryptographic Modules
	
	Click: Add

	Module name: descriptive name about module (eg. opensc-pkcs11)
	Module file: absolute path of opensc-pkcs11.so

	For proper operation, you also need to configure the module:
	In the Crypthographic Modules dialog, select the OpenSC card,
	and click on the "Config" button to the right. Select the
	"Enable this token" radio button, and select the "Publicly
	readable Certs" button.

	This will ensure that netscape uses the card when trying to
	display encrypted messages in netscape messenger.  Setting
	"Publicly readable Certs" will also stop a pretty annoying habit
	of netscape which is to ask for all PINs when browsing sites
	requiring client authentication.

	You should _not_ select the "RSA" button. If this option is
	selected, netscape will try to use the card for all public key
	operations, and will fail horribly.

Mozilla:
	Make sure Personal Security Manager (PSM) is installed
	(eg. mozilla-psm package is installed).

	Select menu: Edit -> Preferences

	Select category: Privacy & Security -> Certificates

	Click: Manage Security Devices

	Click: Load

	Module name: descriptive name about module (eg. opensc-pkcs11)
	Module file: absolute path of opensc-pkcs11.so


Notes
-----

Netscape seems to show more information about the security module
than mozilla. Otherwise all stuff is untested.