You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Initially brought up by @larssilven in #2916 (comment) the way how sc_pkcs15init_verify_secret() is implemented, it can result in prompts for PIN in totally unexpected places for a user, without any prompt by the application in case the pinpad is enabled:
Problem Description
Initially brought up by @larssilven in #2916 (comment) the way how
sc_pkcs15init_verify_secret()
is implemented, it can result in prompts for PIN in totally unexpected places for a user, without any prompt by the application in case the pinpad is enabled:OpenSC/src/pkcs15init/pkcs15-lib.c
Line 3961 in 8fc2c20
Proposed Resolution
Given for how long this code is in, I would propose to address this after 0.24.0 will be out
Steps to reproduce
enable_pinpad = true
is inopensc.conf
C_Login
beforeC_GenerateKeyPair()
Current results: The opensc will prompt for the pin off-band on the pinpad reader
Expected results: The OpenSC should fail with
CKR_USER_NOT_LOGGED_IN
I am wondering why the following code does not kick in though:
OpenSC/src/pkcs11/pkcs11-object.c
Line 1168 in 8fc2c20
Logs
See the above referenced comment for more logs.
The text was updated successfully, but these errors were encountered: