Date: Thu, 18 Aug 2005 14:59:02 +0200 From: "Petr Holub" <hopet@ics.muni.cz> To: <janos.mohacsi@bsd.hu> Cc: ports@freebsd.org Subject: FreeBSD Port: security/openct Message-ID: <00eb01c5a3f4$9b6432f0$5317fb93@KLOBOUCEK>
next in thread | raw e-mail | index | archive | help
Hi,
I've seen openct (with opensc and Mozilla) not being able to do hotplug
of iKey3000 on FreeBSD RELENG_6 (6-STABLE) although the hotplug is enabled
in the config file.
1) when I attempt to start the deamon when no key is present, it
doesn't start and with debug=1 it just reports:
Debug: ifd_scan_usb: BSD: ifd_scan_usb
2) when detaching the key while the daemon is running, it eats up
the processor and mozilla complains:
sec.c:204:sc_pin_cmd: returning with: PIN code or key incorrect
card.c:203:sc_transceive: Unable to transmit: Reader detached (hotplug device?)
card.c:238:sc_transmit_apdu: transceive() failed: Reader detached (hotplug
device?)
card-starcos.c:1172:starcos_set_security_env: APDU transmit failed: Reader
detached (hotplug device?)
sec.c:67:sc_set_security_env: returning with: Reader detached (hotplug device?)
pkcs15-sec.c:312:sc_pkcs15_compute_signature: sc_set_security_env() failed:
Reader detached (hotplug device?)
3) when the key is re-attached after (2), the daemons keeps hanging,
mozilla says
card-starcos.c:1393:starcos_logout: APDU re-transmit failed: Reader reattached
(hotplug device?)
sec.c:104:sc_logout: returning with: Reader reattached (hotplug device?)
but the certicate is no longer accessible.
When no hotplug is done, everything works fine except it seems to
be a little bit slower than on Win + IE.
Best,
Petr
================================================================
Petr Holub
CESNET z.s.p.o. Supercomputing Center Brno
Zikova 4 Institute of Compt. Science
162 00 Praha 6, CZ Masaryk University
Czech Republic Botanicka 68a, 60200 Brno, CZ
e-mail: Petr.Holub@cesnet.cz phone: +420-549493944
fax: +420-541212747
e-mail: hopet@ics.muni.cz
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?00eb01c5a3f4$9b6432f0$5317fb93>