- SmartcardServices-Dev - lists.macosforge.org

Signed Installer posted for OS X El Capitan v10.11
by Shawn A. Geddis 02 Oct '15

02 Oct '15

Signed Installer posted for OS X El Capitan v10.11 <https://smartcardservices.macosforge.org/post/signed-installer-posted-for-o…>2015-10-01 Installer posted for OS X El Capitan v10.11. This SmartCardServices Installer provides the Tokend bundles and cacloginconfig.plist for installation on your OS X El Capitan systems. Starting with today's (1 Oct 2015) release of the installer for OS X El Capitan v10.11, we are digitally signing the Installer and Tokend bundles for integrity assurance. The installer will be recognized and install properly with Gatekeeper set to default or higher and, on El Capitan, are installed in a new location "/ Library / Security / tokend" to work with System Integrity Protection (SIP) enabled. ____________________________________________________________________________________ NOTE: Installer and Tokend bundles from this project are now digitally signed. Older installers (ie. for v10.10, v10.9, ...) will be re-posted, incremented to v2.1, and digitally signed. The installation location will remain as they were on the respective OS releases. ____________________________________________________________________________________ You should verify the integrity of the Tokend(s) you have installed by verifying the digital signature using the following command in Terminal: $ codesign -dvvvv /Library/Security/tokend/<nameoftoken>.tokend for example: $ codesign -dvvvv /Library/Security/tokend/PIV.tokend Your results should be similar to the following: $ codesign -dvvvv /Library/Security/tokend/PIV.tokend/ Executable=/Library/Security/tokend/PIV.tokend/Contents/MacOS/PIV Identifier=org.macosforge.smartcardservices.tokend.piv Format=bundle with Mach-O thin (x86_64) CodeDirectory v=20200 size=1307 flags=0x0(none) hashes=57+3 location=embedded Hash type=sha1 size=20 CDHash=9211409073a5f9034a523b891918cbf8030a6b84 Signature size=4349 Authority=Mac Developer: Shawn Geddis (6NSF8PH78P) Authority=Apple Worldwide Developer Relations Certification Authority Authority=Apple Root CA Signed Time=Sep 29, 2015, 9:06:58 PM Info.plist entries=9 TeamIdentifier=L2L8FX9AEK Sealed Resources version=2 rules=12 files=5 Internal requirements count=1 size=92 To ensure you have the original installer posted here and not one that has been modified, please also verify the SHA-256 hash of the .zip you download against the hash posted for the corresponding installer from the installers download page. http://smartcardservices.macosforge.org/trac/wiki/installers/ <https://smartcardservices.macosforge.org/trac/wiki/installers> Recall, we also post installers under a “Current” Static URL as well. SmartCard Services "Current" - Most recent Installer (i.e v2.1.0 for OS X El Capitan v10.11) http://smartcardservices.macosforge.org/files/installers/SCS-Current.zip <https://smartcardservices.macosforge.org/files/installers/SCS-Current.zip> The static URL for the most recent installer versions corresponding to each major release of OS X follows the format: http://smartcardservices.macosforge.org/files/installers/SCS-XX.YY-Current.… XX - 10 YY - Major Release (i.e '09' for OS X Mavericks v10.9) "Current - OS X El Capitan v10.11 <https://smartcardservices.macosforge.org/files/installers/SCS-10.11-Current…>” "Current - OS X Yosemite v10.10 <https://smartcardservices.macosforge.org/files/installers/SCS-10.10-Current…>” "Current - OS X Mavericks v10.9 <https://smartcardservices.macosforge.org/files/installers/SCS-10.09-Current…>” "Current - OS X Mountain Lion v10.8 <https://smartcardservices.macosforge.org/files/installers/SCS-10.08-Current…>” "Current - OS X Lion v10.7 <https://smartcardservices.macosforge.org/files/installers/SCS-10.07-Current…>” "Current - OS X Snow Leopard v10.6" <https://smartcardservices.macosforge.org/files/installers/SCS-10.06-Current…> - Shawn _____________________________________________________________________ Shawn Geddis geddis at {Mac | Me | iCloud} dot com Security and Certifications Engineer, Apple geddis at {apple} dot com Smart Card Services Project/Dev Lead: Project Wiki: [SmartCardServices.MacOSFforge.Org <http://smartcardservices.macosfforge.org/>] Mailing Lists: [Lists.MacOSForge.Org/mailman/listinfo <http://lists.macosforge.org/mailman/listinfo>] SCS Contact: [scs-cotact(a)macosforge.org <mailto:scs-cotact@macosforge.org>] SCS Admin: [scs-admin(a)macosforge.org <mailto:scs-admin@macosforge.org>] _____________________________________________________________________

3 3

Altered Security Tokend for Belpic/Beid
by Maccampus 24 Aug '15

24 Aug '15

Hello, The Belgian Government Agency (Belpic) who is in charge of making software for the Belgian Electronic Identity Card (BEID) has altered the BelPic Tokend from this project. They never have uploaded their changes to this project though. They seem to have taken the Apple Card Services 2.0bx or lower which contains Belpic.tokend 2.2.1 & 2.2. Maybe they took the source files & altered them or they took the Installable files & have hacked them, to add a higher encryption for Version 3 of the Beid Cards. They have not informed you of their changes & their changes are not added to the later versions of your versions of the Belpic.tokend. Rather they renamed the Belpic.tokent to Beid.tokend & even with their latest software they make us Belgian Apple using citizens to install an old version of the Belpic.tokend, instead of altering the later versions as one would atlas have expected. I want to inform you about these changes in hope that you can add them to the latest versions of the Belpic.tokend & inform them about their inappropriate behavior. Maybe also discuss the future name of the tokens to be Belpic or Beid. I have added their versions of the older Tokend which they are currently using, maybe you can extract the changes from those, if not you will need to ask them for the source. They are found here Home <http://eid.belgium.be/nl/> & have an online contactsheet for technical questions Contact - Home <http://eid.belgium.be/nl/contact/contactform.jsp>. They also use a 3th party to develop for them which is Zetes & can be found here, Zetes Industries - Supply Chain & Mobility Solutions | Auto-ID & Goods Identification | People ID Solutions - Zetes Europe, Middle-East & Africa <http://nl.zetes.be/>, or here Overzicht - Kaartlezers Belgische identiteitskaart <http://www.belgeid.be/>. Maybe you might find them to be the one’s that (once) altered & delived your software for the Belpic Agency. I hope you can make them in cooperation with you deliver the latest version of YOUR Belpic/Beid.tokend containing THEIR changes with their software, preferably by adding your complete software installer to their package or a link to your website rather then only the BELPIC/BEID.tokend. They can inform users to only install the Belpic/Beid Tokend. Thanks for making them setting things right.

1 0

Effort to rebuild smartcard services on Mac from ground up
by Chris Inacio 27 Apr '15

27 Apr '15

Hello all, I'm mostly a frustrated smartcard user at this point, but I play the role of developer (or development manager) in my day job. So I have a combination of Mac OS X 10.10, Centrify (with its smartcard additions), PIV/CAC type smart cards, a Yubikey NEO, and would like it if GnuPG actually worked. Mostly, the CAC/PIV type smartcards actually work (I believe really related to the Centrify, but who knows, really…) but the YubiKey + GnuPG just do NOT work reliably (if at all.) Strangely, it seems like pcsctest can always find the card readers / devices attached to my machine reliably; but I do occasionally run into random bugs of things that simply don't work. And many of my colleagues with Mac's often have numerous problems with smartcards operating correctly. (I personally have 3 smartcards, not including the Yubikey NEO.) In generally, various colleagues use some combination of: the opensource tokend updates, Centrify, and Thursby PKard. But all solutions seem to have bugs / issues filed with Apple. My question is, to someone who hopefully has thought about this a lot more than I have looked into it: how many man months would it be to start over? Take an up-to-date drop of PCSC from open source and do a new cleanroom port to Mac possibly? Second question: would people even want that? Regards, Chris Inacio

6 7

question on secd errors from tokend
by Disiena, Ridley (MSFC-IS60)[EAST] 16 Apr '15

16 Apr '15

Can anyone shed light on what these errors are: secd: SecErrorGetOSStatus unknown error domain: com.apple.security.sos.error for error: The operation couldn’t be completed. (com.apple.security.sos.error error 2 - Public Key not available - failed to register before call) secd: securityd_xpc_dictionary_handler Keychain Access[] DeviceInCircle The operation couldn’t be completed. (com.apple.security.sos.error error 2 - Public Key not available - failed to register before call) Tracking tokend issues and these appear to be common with many tokends. They appear to be from getAcl activity… quite a number occur on card insert and card removal. -Ridley

1 0

SmartCardServices Development
by Harry Göbel 09 Mar '15

09 Mar '15

Hi, I want start to implement a Tokend module for a smartcard but Im pretty unexperienced in Mac development (I just implemented a Windows MiniDriver for this smartcard). Reading the documentation at http://smartcardservices.macosforge.org/trac/wiki/documentation/building it seems to be very simple to compile your project. Unfortunately Im unable to build neither the SmartCardServices nor the tokend project. Following the documentation I called: mkdir 9J61 cd 9J61 sudo darwinbuild init 9J61 sudo darwinbuild SmartCardServices After preparations and download of the sources it always ends with: Xcodebuild: error: cant exec '/Applications/Xcode.app/Contents/Developer/usr/bin/xcodebuild (errno=No such file or directory) Regarding to the log (see attachment) it seems to be a problem with the development environment. Ive installed XCode (6.1.1) and command line tools and DarwinBuild. But the log reports that gcc, as, xcodebuild are not available although they are all available: whereis gcc -> /usr/bin/gcc gcc version -> Apple LLVM version 6.0 (clang-600.0.56) (based on LLVM 3.5svn) whereis as -> /usr/bin/as as v -> Apple Inc version cctools-862, GNU assembler version 1.38 xcodebuild version -> Xcode 6.1.1 Build version 6A2008a Can anyone help me please. BR, Harry

5 5

SmartCardServices Installer Posted for OS X Yosemite v10.10
by Shawn A. Geddis 31 Oct '14

31 Oct '14

SmartCard Services Community, Installer posted for OS X Yosemite v10.10. This SmartCardServices Installer provides the Tokend modules and cacloginconfig.plist for installation on your OS X Yosemite systems. Note that the installer and Tokend modules are not digitally signed again yet, but will be in the future. To ensure you have the original installer posted here and not one that has been modified, please verify the SHA-1 hash of the .zip you download against the hash posted for the corresponding installer from the installers download page: http://smartcardservices.macosforge.org/trac/wiki/installers/ <http://smartcardservices.macosforge.org/trac/wiki/installers/> - Shawn _____________________________________________________________________ Shawn Geddis geddis@{Mac | Me | iCloud}.com Security and Certifications Engineer, Apple geddis(a)apple.com Smart Card Services Project/Dev Lead: Project Wiki: [SmartCardServices.MacOSFforge.Org <http://smartcardservices.macosfforge.org/>] Mailing Lists: [Lists.MacOSForge.Org/mailman/listinfo <http://lists.macosforge.org/mailman/listinfo>] SCS Contact: [scs-cotact(a)macosforge.org <mailto:scs-cotact@macosforge.org>] SCS Admin: [scs-admin(a)macosforge.org <mailto:scs-admin@macosforge.org>] _____________________________________________________________________

1 0

submit Smart card reader device to support Mac
by DavidLiu 22 Jul '14

22 Jul '14

Dear Sir : I want to submit smart card reader device to support Mac , how can I start this process ? Best regards David ________________________________ Any views or opinions presented in this email are solely those of the author and do not necessarily represent those of the company. Employees of Alcor Micro, Corp. are expressly required not to make defamatory statements and not to infringe or authorize any infringement of copyright or any other legal right by email communications. No employee or agent is authorized to conclude any binding agreement on behalf of Alcor Micro, Corp with another party by email without express written confirmation by CEO ??????????????/????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????

1 0

[MacOSForge.org] Servers will be down for scheduled maintenance - TUE 11 MAR 2014 8AM-12PM PST
by Shawn Geddis 10 Mar '14

10 Mar '14

SmartCardServices & SCAP-On-Apple Participants, Scheduled maintenance on ALL Mac OS Forge Servers will be taking place on TUE 11 MAR 2014 8AM-12PM PST. It is scheduled to start at 8AM PST and the activity is expected to take about four hours or more resulting in shutdown until at least 12PM PST. All affected servers will be going through a change in IP address. DNS changes to the domain will be made and its propagation to the Public domains will take approximately 30 Mins to an hour. When maintenance begins, all MacOSForge systems are expected to stop functioning. We very much appreciate your participation and hope the scheduled downtime does not negatively impact your efforts. If you have any questions, comments or otherwise, please drop a line to the projects Admin account: SmartCardServices Admin scs-admin(a)macosforge.org SCAP Admin scap-admin(a)macosforge.org - Shawn _______________________________________________________________________ Shawn Geddis Enterprise Security Consulting Engineer, Apple (geddis(a)apple.com) SCAP-On-Apple Project/Dev Lead: (SCAP-On-Apple.MacOSForge.Org) SmartCardServices Project/Dev Lead: (SmartCardServices.MacOSForge.Org) _______________________________________________________________________

1 0

SmartCardServices Installers for OS X v10.6-v10.9 Posted!
by Shawn Geddis 14 Jan '14

14 Jan '14

SmartCardServices Installers v2.0 for OS X v10.6 - v10.9 have been postedSmart Cards Supported • BELPIC • CAC • CACNG* (Gemalto TOPDLGX4 144 & G&D FIPS 201 SCE 3.2 - ONLY at this time) • JPKI* (NEW - First time release) • PIV Installers: http://smartcardservices.macosforge.org/trac/wiki/installers - Shawn _____________________________________________________________________ Shawn Geddis geddis(a)me.com Enterprise Security Consulting Engineer, Apple geddis(a)apple.com Smart Card Services Project/Dev Lead: Project Wiki: [SmartCardServices.MacOSFforge.Org] Mailing Lists: [Lists.MacOSForge.Org/mailman/listinfo] SCS Contact: [scs-cotact(a)macosforge.org] SCS Admin: [scs-admin(a)macosforge.org] _____________________________________________________________________

1 0

JPKI.tokend Installer for Mac OS X 10.9
by Seikou Ishimaru 02 Dec '13

02 Dec '13

Dear SmartCardServices-Dev, About when does JPKI.tokend Installer for Mac OS X 10.9 release ? Best regards, Seikou Ishimaru ********************************************************** Athena Smartcard Solutions, Inc. Tel:+81-42-660-7555 Fax:+81-42-660-7106 Web:http://www.athena-scs.co.jp/ http://www.athena-scs.com/ Seikou Ishimaru <seikou.ishimaru(a)athena-scs.co.jp> **********************************************************

3 2