opensc/src/pkcs11
2003-04-14 17:29:19 +00:00
..
rsaref - added missing win32.h 2003-03-27 10:12:02 +00:00
.cvsignore
framework-pkcs15.c Have allways a label in CK_TOKEN_INFO 2003-04-14 17:29:19 +00:00
framework-pkcs15init.c - Patches from Stef implementing PKCS11 RNG related functions 2003-01-16 20:10:28 +00:00
libpkcs11.c - More win32 fixes from Stef 2002-12-17 20:44:48 +00:00
Makefile.am - build fixes from Andreas 2003-04-11 11:46:02 +00:00
Makefile.mak - Patches from Stef implementing PKCS11 RNG related functions 2003-01-16 20:10:28 +00:00
mechanism.c - fixed typo in previous patch 2003-01-20 09:56:53 +00:00
misc.c added error msg SC_ERROR_KEYPAD_TIMEOUT 2003-03-03 21:07:42 +00:00
opensc_pkcs11_install.js
openssl.c - fixed compiled warning 2003-02-03 12:20:24 +00:00
pkcs11-global.c Removed some errors that occured with unsupported cards 2003-04-11 14:22:52 +00:00
pkcs11-object.c Let C_FindObjectsInit return correctly 2003-02-20 18:54:52 +00:00
pkcs11-session.c - prevent compiler warning 2003-02-21 12:47:30 +00:00
pkcs11.h - New utility library libpkcs11 - supposed to provide easy loading and 2002-12-17 11:48:14 +00:00
README
sc-pkcs11.h - new pkcs15 object creation stuff 2003-02-23 17:50:33 +00:00
secretkey.c
slot.c remove/insert fix: restore the slot->reader in slot_token_removed 2003-03-07 14:18:55 +00:00

Installation
------------

Netscape:
	Select menu: Communicator -> Tools -> Security Info

	Select Cryptographic Modules
	
	Click: Add

	Module name: descriptive name about module (eg. opensc-pkcs11)
	Module file: absolute path of opensc-pkcs11.so

	For proper operation, you also need to configure the module:
	In the Crypthographic Modules dialog, select the OpenSC card,
	and click on the "Config" button to the right. Select the
	"Enable this token" radio button, and select the "Publicly
	readable Certs" button.

	This will ensure that netscape uses the card when trying to
	display encrypted messages in netscape messenger.  Setting
	"Publicly readable Certs" will also stop a pretty annoying habit
	of netscape which is to ask for all PINs when browsing sites
	requiring client authentication.

	You should _not_ select the "RSA" button. If this option is
	selected, netscape will try to use the card for all public key
	operations, and will fail horribly.

Mozilla:
	Make sure Personal Security Manager (PSM) is installed
	(eg. mozilla-psm package is installed).

	Select menu: Edit -> Preferences

	Select category: Privacy & Security -> Certificates

	Click: Manage Security Devices

	Click: Load

	Module name: descriptive name about module (eg. opensc-pkcs11)
	Module file: absolute path of opensc-pkcs11.so


Notes
-----

Netscape seems to show more information about the security module
than mozilla. Otherwise all stuff is untested.