opensc/src/pkcs15init
jps b422872813 For CardOS 4.3B and 4.4, the Verify Retry Counter Package
can be loaded at ADMINISTRATION life cycle phase to change
the behavior of the VERIFY command in regard to return codes.
When that package is loaded, the PIN can be created with this
"verifyRC" flag in cardos.profile if the return code must be 
ISO7816-4 compliant (63Cx with x being the value of the remaining 
retry counter when required verification has failed).



git-svn-id: https://www.opensc-project.org/svnp/opensc/trunk@5558 c6295689-39f2-0310-b995-f0e70906c6a9
2011-06-07 12:44:53 +00:00
..
asepcos.profile Create new type "privdata" in all profiles with different 2008-12-28 16:07:51 +00:00
authentic.profile libopensc: export sc_find_app(), remove debug message, ... 2011-01-12 17:41:10 +00:00
cardos.profile For CardOS 4.3B and 4.4, the Verify Retry Counter Package 2011-06-07 12:44:53 +00:00
cyberflex.profile cyberflex: no more 'protect-certificates' profile option 2010-02-20 23:20:38 +00:00
entersafe.profile pkcs15init: EnterSafe: increase size of the xDF files 2011-03-15 09:39:04 +00:00
flex.profile pkcs15init cflex: fix protected initialisation 2010-03-04 13:37:11 +00:00
gpk.profile change base id so it does not overlap with the next one. 2009-03-05 15:15:24 +00:00
ias_adele_admin1.profile IAS/ECC: add IAS/ECC card specific files ... 2011-02-16 10:55:05 +00:00
ias_adele_admin2.profile IAS/ECC: add IAS/ECC card specific files ... 2011-02-16 10:55:05 +00:00
ias_adele_common.profile iasecc: obsolete syntax of the 'Adele Common' card profile 2011-05-03 07:50:26 +00:00
iasecc_admin_eid.profile IAS/ECC: add IAS/ECC card specific files ... 2011-02-16 10:55:05 +00:00
iasecc_generic_oberthur.profile iasecc: pkcs15init profiles: add 'CREATE' acl for the Oberthur's application DF ... 2011-04-26 16:27:42 +00:00
iasecc_generic_pki.profile IAS/ECC: add IAS/ECC card specific files ... 2011-02-16 10:55:05 +00:00
iasecc.profile iasecc: pkcs15init profiles: add 'CREATE' acl for the Oberthur's application DF ... 2011-04-26 16:27:42 +00:00
incrypto34.profile pkcs15init profile: 'private key' as BSO is differenciated from the one as EF 2010-01-21 10:07:40 +00:00
jcop.profile Create new type "privdata" in all profiles with different 2008-12-28 16:07:51 +00:00
Makefile.am Amend r5201: also move libltdl build properties to the right Makefile and other leftovers. 2011-02-17 07:45:36 +00:00
Makefile.mak WindowsInstaller: build for x64 with nmake -f Makefile.mak BUILD_TYPE=WIN64 2011-04-01 08:06:25 +00:00
miocos.profile
muscle.profile muscle profile: keep default ACLs for the 'DIR' file 2010-03-31 12:41:39 +00:00
myeid.profile pkcs15init myEID: in profile increase size of xDF files, also ... 2011-04-15 17:11:38 +00:00
oberthur.profile oberthur: add in emulator and create in pkcs15init the private data object 2010-04-18 14:51:44 +00:00
pkcs15-asepcos.c pkcs15: use general 'AuthenticationObject' instead of 'PinObject' 2011-06-05 15:46:25 +00:00
pkcs15-authentic.c compile warnings: resolve 'comparison between signed and unsigned' compiler warnings 2011-06-02 16:59:39 +00:00
pkcs15-cardos.c For CardOS 4.3B and 4.4, the Verify Retry Counter Package 2011-06-07 12:44:53 +00:00
pkcs15-cflex.c pkcs15: use general 'AuthenticationObject' instead of 'PinObject' 2011-06-05 15:46:25 +00:00
pkcs15-entersafe.c pkcs15: use general 'AuthenticationObject' instead of 'PinObject' 2011-06-05 15:46:25 +00:00
pkcs15-gpk.c pkcs15: use general 'AuthenticationObject' instead of 'PinObject' 2011-06-05 15:46:25 +00:00
pkcs15-iasecc.c pkcs15: use general 'AuthenticationObject' instead of 'PinObject' 2011-06-05 15:46:25 +00:00
pkcs15-incrypto34.c pkcs15: use general 'AuthenticationObject' instead of 'PinObject' 2011-06-05 15:46:25 +00:00
pkcs15-init.h pkcs15: use general 'AuthenticationObject' instead of 'PinObject' 2011-06-05 15:46:25 +00:00
pkcs15-jcop.c pkcs15: use general 'AuthenticationObject' instead of 'PinObject' 2011-06-05 15:46:25 +00:00
pkcs15-lib.c pkcs15: use general 'AuthenticationObject' instead of 'PinObject' 2011-06-05 15:46:25 +00:00
pkcs15-miocos.c pkcs15: use general 'AuthenticationObject' instead of 'PinObject' 2011-06-05 15:46:25 +00:00
pkcs15-muscle.c pkcs15: use general 'AuthenticationObject' instead of 'PinObject' 2011-06-05 15:46:25 +00:00
pkcs15-myeid.c pkcs15: use general 'AuthenticationObject' instead of 'PinObject' 2011-06-05 15:46:25 +00:00
pkcs15-oberthur-awp.c pkcs15init: oberthur: cleanup compiler warnings 2011-06-01 17:15:31 +00:00
pkcs15-oberthur.c pkcs15: use general 'AuthenticationObject' instead of 'PinObject' 2011-06-05 15:46:25 +00:00
pkcs15-oberthur.h style: // -> /* */ 2010-06-16 12:01:04 +00:00
pkcs15-rtecp.c pkcs15: use general 'AuthenticationObject' instead of 'PinObject' 2011-06-05 15:46:25 +00:00
pkcs15-rutoken.c RuToken: 'use uninitialized variable' warning 2011-06-05 16:53:07 +00:00
pkcs15-setcos.c pkcs15: use general 'AuthenticationObject' instead of 'PinObject' 2011-06-05 15:46:25 +00:00
pkcs15-starcos.c pkcs15: use general 'AuthenticationObject' instead of 'PinObject' 2011-06-05 15:46:25 +00:00
pkcs15-westcos.c pkcs15: use general 'AuthenticationObject' instead of 'PinObject' 2011-06-05 15:46:25 +00:00
pkcs15.profile pkcs15init profile: 'private key' as BSO is differenciated from the one as EF 2010-01-21 10:07:40 +00:00
profile.c For CardOS 4.3B and 4.4, the Verify Retry Counter Package 2011-06-07 12:44:53 +00:00
profile.h pkcs15: use general 'AuthenticationObject' instead of 'PinObject' 2011-06-05 15:46:25 +00:00
README
rutoken_ecp.profile RuToken-ECP: profile option to allow the reset of User PIN with SoPIN 2011-06-02 19:06:43 +00:00
rutoken.profile Rutoken S: add 'aid' to profile (for '-init --create-pkcs15 --so-pin 87654321 --so-puk -p rutoken+small') 2010-05-30 13:54:54 +00:00
setcos.profile sertcos: both PINs are globals 2010-01-29 17:41:05 +00:00
starcos.profile pkcs15init profile: 'private key' as BSO is differenciated from the one as EF 2010-01-21 10:07:40 +00:00
westcos.profile Updated westcos driver by François Leblanc 2009-12-03 07:10:24 +00:00


Very brief instructions

To init card:

Erase card and create pkcs15 dir
	./pkcs15-init -EC

Store a PIN on the card, using ID 01
	./pkcs15-init -P  --auth-id 01 --pin aaaa --puk bbbb --label "My PIN"

Generate a 512 bit RSA key and store on card, protected by the above PIN
	./pkcs15-init -G rsa/512 --auth-id 01

Or, store a pkcs12 key/certificate pair
	./pkcs15-init --auth-id 01 -f pkcs12 -S mycert.p12

	Note that the pkcs12 file must use just one password - if you
	use different passwords for integrity and confidentiality,
	OpenSC will fail to import the keys.