Issue with SC-HSM smart cards on Omni Key 3x21 smart card readers on Linux #715
Comments
|
Can you create a log with OPENSC_DEBUG=9 ? It's probably the same card reader issue with APDU vs TPDU mode and extended length as on Windows. The SmartCard-HSM requires support for extended length APDUs, in particular in the ENUMERATE OBJECTS command. |
|
OPENSC_DEBUG=9 pkcs15-tool -D 00 .0x2ac3ce00 14:07:33.596 [pkcs15-tool] reader-pcsc.c:190:pcsc_internal_transmit: called 6F 07 82 01 78 85 02 01 02 90 00 o...x......0x2ac3ce00 14:07:33.632 [pkcs15-tool] apdu.c:399:sc_single_transmit: returning with: 0 (Success) 00 A4 00 00 02 2F 02 00 ...../..0x2ac3ce00 14:07:33.632 [pkcs15-tool] reader-pcsc.c:190:pcsc_internal_transmit: called 6F 0B 80 02 01 CE 82 01 01 83 02 2F 02 90 00 o........../...0x2ac3ce00 14:07:33.658 [pkcs15-tool] apdu.c:399:sc_single_transmit: returning with: 0 (Success) 00 B1 00 00 00 00 04 54 02 00 00 02 00 .......T.....0x2ac3ce00 14:07:33.990 [pkcs15-tool] reader-pcsc.c:190:pcsc_internal_transmit: called 00 A4 08 00 02 2F 00 00 ...../..0x2ac3ce00 14:07:34.323 [pkcs15-tool] reader-pcsc.c:190:pcsc_internal_transmit: called 6A 86 j.0x2ac3ce00 14:07:34.343 [pkcs15-tool] apdu.c:399:sc_single_transmit: returning with: 0 (Success) 00 A4 08 00 02 50 15 00 .....P..0x2ac3ce00 14:07:34.343 [pkcs15-tool] reader-pcsc.c:190:pcsc_internal_transmit: called 6A 86 j.0x2ac3ce00 14:07:34.372 [pkcs15-tool] apdu.c:399:sc_single_transmit: returning with: 0 (Success) 00 A4 08 00 02 50 31 00 .....P1.0x2ac3ce00 14:07:34.701 [pkcs15-tool] reader-pcsc.c:190:pcsc_internal_transmit: called 6A 86 j.0x2ac3ce00 14:07:34.730 [pkcs15-tool] apdu.c:399:sc_single_transmit: returning with: 0 (Success) |
|
You can see at that the reader fails to process the extended length APDU. Maybe you want to try the Omnikey driver for Linux and check the documentation how the reader can be switched to TPDU mode. |
|
It is written @ https://github.com/OpenSC/OpenSC/wiki/SmartCardHSM but this does not solve the issue |
|
Try running pcscd with to see if pcscd is actually using the Omnikey driver. You need to stop the pcscd service first. |
|
##########while using omnikey udev rule in ccid file root@josef:/# pcscd -fd ###ccid udev rules and driver removed and now omnikey udev rules & drivers are active #Output root@josef:/# pcscd -fd i have inserted/removed the smart card reader but it is still showing following output against opensc-tool -l command Detected readers (pcsc)Nr. Card Features Name after installting Omnikey Driver (ifdokccid_linux_i686-v4.0.5.5.tar.gz), it does not detect any smart card. "No" shown in the "opensc-tool -l" command. |
|
As per my understanding, problem is with the omnikey drivers. Omnikey driver are for Intel (32/64) architecture. However, i am using debian on MIPS64 architecture. root@josef:/# pcscd -fd |
Bonjour Users,
I am trying to use SC-HSM smart cards with Omni key 3121 SC reader with OpenSC. I am using the latest OpenSC version: 0.15
But when i try t run the basic command of dump then it generates the following error.
pkcs15-tool -D
Using reader with a card: OmniKey CardMan 3121 00 00
PKCS#15 binding failed: Incorrect parameters in APDU
Interesting fact is that, if i replace Gemalto Smart card reader or replace openSC with 0.13 version, then the command runs successfully. Please guide me.
Regards
Scott Thomas
The text was updated successfully, but these errors were encountered: