-
Notifications
You must be signed in to change notification settings - Fork 716
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
minidriver not recognising pinless PKCS#15 applications #2719
Labels
Comments
The PIV card also has a key usable without a PIN. Mostly used to authenticate the card to door locks. The code looks good. Do you want to submit a PR? If not I could this afternoon and test on Windows. |
I'll make a PR later today... |
llogar
added a commit
to llogar/OpenSC
that referenced
this issue
Feb 24, 2023
A call to CardGetProperty('PIN Information', ...) should not fail for keys that are not protected with PINs (PinId = ROLE_EVERYONE). Fixes issue OpenSC#2719
5 tasks
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Problem Description
Slovenian eID card also contains (in a separate PKCS#15 application) a private key which is not protected by a PIN.
minidriver assigns this key a
ROLE_EVERYONE
, but fails later when retrieving a PIN information using theCardGetProperty('PIN Information', ...)
call.I've also noticed, that in contrast to PKCS#11 when using minidriver only the first 'generic' PKCS#15 application is used and the remaining (if the card has several) are ignored. I think this should also be mentioned somewhere in the docs...
Proposed Resolution
I guess, if PIN is not present, a dummy/empty
PIN_INFO
structure should be returned and a call toCardGetProperty()
should succeed, something likeSteps to reproduce
Try to do anything with a card that has keys not protected by PIN...
Logs
The text was updated successfully, but these errors were encountered: