- SmartcardServices-Dev - lists.macosforge.org

Re: [SmartcardServices-Dev] Documentation section is still empty, ; -(...
by Shawn A. Geddis 18 Jun '09

18 Jun '09

On Apr 20, 2009, at 2:54 PM, Paul Kwan wrote: > Hi, > > When can we expect to have document links shown up in the > Documentation Section? Thanks. > > PSK Paul, That is indeed a task on my plate that is late in coming... Will shoot for *beginning* to post some of this by the end of the week. Will that Work ? -Shawn __________________________________________________ Shawn Geddis geddis(a)mac.com Security Consulting Engineer MacOSForge Project Lead: Smart Card Services Web: http://smartcardservices.macosforge.org/ Lists: http://lists.macosforge.org/mailman/listinfo __________________________________________________

2 2

Trouble w/ pcscd and MSC
by Johnny Alaska 05 Jun '09

05 Jun '09

I am trying to develop a mac os X application (in cocoa) that uses the pcscd to access a couple of CCID compliant devices. The long term goal is to use these devices to recognize which user is interacting w/ the program. At the moment I am just getting started and trying to figure out how to use the pcscd. To get started I wrote the following routine to list the smart card devices that are attached to my mac... - (void)ListSmartCardDevices { MSCLPTokenInfo tokenList; MSC_RV rv; MSCULong32 listSize = 0; rv = MSCListTokens( MSC_LIST_KNOWN, NULL, &listSize ); if (rv != MSC_SUCCESS) { char *err_str = pcsc_stringify_error(rv); NSLog(@"MSCListTokens failed for reason %s", err_str); return; } if (listSize == 0) { NSLog(@"MSCListTokens found no smart cards"); return; } tokenList = (MSCLPTokenInfo)malloc(sizeof(MSCTokenInfo)*listSize); rv = MSCListTokens( MSC_LIST_KNOWN, tokenList, &listSize ); if (rv != MSC_SUCCESS) { char *err_str = pcsc_stringify_error(rv); NSLog(@"MSCListTokens failed for reason %s", err_str); return; } for (int i = 0; i < listSize; i++) { printf("Token name : %s\n", tokenList[i].tokenName); printf("Slot name : %s\n", tokenList[i].slotName); } } If I run my program (which includes this routine) w/ no smartcards plugged in I get the following (predictable) output. [Session started at 2009-06-02 15:37:14 -0700.] *2009-06-02 15:37:15.155 POS[59501:10b] MSCListTokens found no smart cards* If I then plug in the ACR122 device from ACS system and rerun my program I get the following error [Session started at 2009-06-02 15:38:18 -0700.] *2009-06-02 15:38:19.470 POS[59511:10b] MSCListTokens failed for reason Unknown PCSC error: 40019 [0x00009C53]* I get a similar error if I plug in the SCL010 card reader from SCM microsystems. Can anyone suggest any debugging next steps? Cheers, J

2 4

SCardListReaders() returns 1 reader but empty reader string?
by Johnny Alaska 04 Jun '09

04 Jun '09

I am trying to access an NFC reader programatically from either linux or os X, using either the ACR122 or the ACS SCL010 readers. Unfortunately the musclecard library does not appear to work for either these devices/platforms so I am trying to access these devices directly using PC/SC calls. At the moment I am running into an odd problem where SCardListReaders() returns the correct number of readers attached to the system but no reader string. The pertinent piece of my program at the moment resembles this... - (void)findPCSCDevices { NSLog(@"Find PCSC Devices"); // Get a connection to the pcsc daemon. MSCLong32 rv; SCARDCONTEXT localHContext = 0; rv = SCardEstablishContext(SCARD_SCOPE_SYSTEM, 0, 0, &localHContext); if (rv != SCARD_S_SUCCESS) { NSLog(@"SCard establish connection failed w/ error %s", pcsc_stringify_error(rv)); return; } // Get the reader list size. MSCULong32 readerLength = 0; rv = SCardListReaders(localHContext, NULL, NULL, &readerLength); if (rv != SCARD_S_SUCCESS) { NSLog(@"SCard get readers failed w/ error %s", pcsc_stringify_error(rv)); return; } else { NSLog(@"SCard get readers found %d readers", readerLength); } // Fetch a full list of attached readers. char *readerList = (char *) malloc(sizeof(char) * readerLength); assert(readerList); rv = SCardListReaders(localHContext, NULL, readerList, &readerLength); NSLog(@"%d readers - readerlist %s", readerLength, readerList); <snip> } This function prints the following when run. [Session started at 2009-06-04 14:49:18 -0700.] *2009-06-04 14:49:18.691 POS[11034:10b] Find PCSC Devices* *2009-06-04 14:49:18.693 POS[11034:10b] SCard get readers found 1 readers* *2009-06-04 14:49:18.693 POS[11034:10b] 1 readers - readerlist * Shouldn't SCardListReaders() return a valid reader string or an error? Also is it possible for me to look up the tokeninfo for the particular devices I am trying to use and use this info to explicitly connect to them instead of reading and parsing the reader info in this fashion? Thanks for the help, J

1 0

Documentation section is still empty, ; -(...
by Paul Kwan 20 Apr '09

20 Apr '09

Hi, When can we expect to have document links shown up in the Documentation Section? Thanks. PSK

1 0

Re: [SmartcardServices-Dev] what's the focus of the SmartcardServices project?
by Shawn A. Geddis 23 Mar '09

23 Mar '09

On Mar 17, 2009, at 5:08 AM, Folkert Saathoff wrote: > Hello List, > glad to see things are going forward again with smartcard > integration on Mac OS X. > > I'm a bit confused though about the focus of the project (please > excuse my ignorance, I'm reading up on it as we speak :) > I'm mostly interested in home/personal use of USB Smartcards (eg > Aladdin eTokenPRO), not necessarily for login authentication, but > rather as a secure place to store ssh keys etc. Thus, i'm looking > for a way to provision (if that's the right term) cards on Mac OS X, > preferably using open source middleware. Right now, it seems that > the OpenSC project should be the best place to look for that. But > I'm wondering, is anybody on the list interested in (and in a > position to contribute to) this kind of thing? Or are people mainly > concerned with making enterprise stuff like CAC and PIV work > correctly? > > thnx/ cheers > Folkert Saathoff Folkert, Welcome to the List / Project and I hope we can be of assistance to you. This Project has a very ambitious goal of enhancing all things "Token" related with Mac OS X in an interactive and open source community. Apple has been doing a fair amount of work internally and with some external individuals, but we really wanted to take this to the next level. For that, we felt a good way to engage all of the appropriate entities in this space while providing a high level of transparency is to bring everyone together with this MacOSForge Project. We have pulled together all of the appropriate open source code previously available via http://www.opensource.apple.com/ darwinsource/ which makes up the SmartCardServices. We already have a few sub-proejcts that will be added which will provide key capability that did not previously exist. One such sub-project is a "PKCS#11 Shim" which is built on top of CDSA and fully leverages the built-in SmartCardServices without inflicting a problem of arbitration as is the case with competing PKCS#11 Library and Tokend environments right now. The capability of a Tokend on Mac OS X fully allows for complete provisioning, personalization, administration, etc. of a supported Smart Card. A "Tokend" is an abstraction for any kind of security token. The currently shipped tokend modules were originally developed to support PKI-based Smart Cards already issued (i.e. CAC,PIV,BELPIC,JPKI). We want this project to take that further and work to providing a set of APIs / Services that extend to what you are asking for and what is needed for future concepts. There is much in our minds as to what can be done if we all work together. You are more than welcome to participate or select the environments of choice, but we hope you consider working with us here to further our work and meeting your current and future needs as well. __________________________________________________ Shawn Geddis geddis(a)mac.com Security Consulting Engineer MacOSForge Project Lead: Smart Card Services Web: http://smartcardservices.macosforge.org/ Lists: http://lists.macosforge.org/mailman/listinfo __________________________________________________

1 0

what's the focus of the SmartcardServices project?
by Folkert Saathoff 17 Mar '09

17 Mar '09

Hello List, glad to see things are going forward again with smartcard integration on Mac OS X. I'm a bit confused though about the focus of the project (please excuse my ignorance, I'm reading up on it as we speak :) I'm mostly interested in home/personal use of USB Smartcards (eg Aladdin eTokenPRO), not necessarily for login authentication, but rather as a secure place to store ssh keys etc. Thus, i'm looking for a way to provision (if that's the right term) cards on Mac OS X, preferably using open source middleware. Right now, it seems that the OpenSC project should be the best place to look for that. But I'm wondering, is anybody on the list interested in (and in a position to contribute to) this kind of thing? Or are people mainly concerned with making enterprise stuff like CAC and PIV work correctly? thnx/ cheers Folkert Saathoff oh and @Henry Hotz: Centrify DirectControl already does PKInit today, in case you weren't aware of it :)

1 0

pcsc framework 1.4.0
by Mark Baumann 17 Feb '09

17 Feb '09

Hey! Is there are possibility to get the source code of apples modificated pcsc framework version 1.4.0? Thanks! Mark

2 1

pcsc - driver selecting problem
by Mark Baumann 17 Feb '09

17 Feb '09

Working environment: System Version: Mac OS X Leopard 10.5.6 (9G55) [up-to-date] Kernel Version: Darwin 9.6.0 PCSC Framework 1.4.0 Problem: pcscd takes the ccid-driver instead of the driver from Omnikey Description: Not always, but regulary the pcsc daemon loads the generic CCID driver bundle from Ludovic Rousseau when a card reader from Omnikey is plugged in. The plist-file (Info.plist) of this driver matches the Pid of the reader, but doesn't support all features. In the system are now two driver bundles installed which both match the reader device through its Pid and the Info.plist file, but just one of them supports all features. For the customers it is an unpleasant procedure not to know which driver is loaded because some cards need either a special API which only works with the drivers of the reader device manufacturer or they need some special requirements because they are not fully ISO7816 compliant so that they are not supported by the free CCID driver. At the moment pcsc daemon prefers to take more often the pre-installed free CCID driver than the driver from the device vendor. The pcsc daemon just checks one driver after the other (directory listing / alphabetical index / directory layout) until the Vid/Pid matches the first founded Info.plist file that contains an entry for the connected device. Bad Solution: Deleting the generic CCID driver bundle or through renaming or symlink builds a priority list / directory listing - workaround Better Solution: Built in priority list in pcscd (Apple) - as file, editable vendor drivers have higher priority, lower priority for generic driver Any other ideas or solutions? Thanks!

1 0

Re: [SmartcardServices-Dev] Question about osxConfigure.patch
by Shawn A. Geddis 30 Jan '09

30 Jan '09

On Jan 30, 2009, at 9:55 AM, Ludovic Rousseau wrote: > Hello, > > Why is the same file present in two different places? > 1. smartcardservices/trunk/SmartcardCCID/files/osxConfigure.patch > 2. smartcardservices/trunk/SmartcardCCID/ccid/files/osxConfigure.patch > > Maybe file 1 can be removed? > > Bye > > -- Dr. Ludovic Rousseau Ludovic, What was posted is precisely what was in the repository at Apple. One of our first tasks on this sub-project is to begin some cleanup and also provide any missing (private) header files. Submit a ticket and between you and I we can clean that up. -Shawn __________________________________________________ Shawn Geddis geddis(a)mac.com Security Consulting Engineer MacOSForge Project Lead: Smart Card Services Web: http://smartcardservices.macosforge.org/ Lists: http://lists.macosforge.org/mailman/listinfo __________________________________________________

1 0

Question about osxConfigure.patch
by Ludovic Rousseau 30 Jan '09

30 Jan '09

Hello, Why is the same file present in two different places? 1. smartcardservices/trunk/SmartcardCCID/files/osxConfigure.patch 2. smartcardservices/trunk/SmartcardCCID/ccid/files/osxConfigure.patch Maybe file 1 can be removed? Bye -- Dr. Ludovic Rousseau

1 0