- SmartcardServices-Users - lists.macosforge.org

Issues with installing Mac Card Reader
by William S. Kelley 23 Mar '19

23 Mar '19

Hello, I’m trying to install a card reader for my MAC OS 10.14.2. The latest version on https://smartcardservices.github.io/installers/ <https://smartcardservices.github.io/installers/> is for the MAC OS Sierra v 10.12. I’m able to download the file but I get the following error message when I attempt to open and install the file. “Smart Card Services 2.1.2 [OSX 10.12]” is damaged and can’t be opened. You should move it to the Trash. Am I doing something wrong here? v/r Scott

2 1

unable to unzip smart card services release
by Rudy Novak 27 Aug '18

27 Aug '18

I am getting this error after downloading the macOS Sierra v10.12 Smart Card Services Installer: “Smart Card Services 2.1.2 [OSX 10.12]” is damaged and can’t be opened. You should move it to the Trash.” Any ideas? Thanks, Rudy

2 1

Odd Keychain CAC and Certificate behavior
by Peter Walsh 24 Aug '18

24 Aug '18

Our team has been seeing some very odd behavior with certs & CACs over the past few months that we can not resolve. We operate a DoD site with PKI auth so we are constantly testing and consuming using various configs. Multiple users have had this problem. The config in question is macOS 10.13.5 and 10.13.6 Centrify Express for Smart Card 5.4.2 (542668) Chrome (latest) & Safari (latest) Oberthur and G&D Smart Cards Cert Behaviors =========== 1) The server side SSL cert come up as untrusted because Keychain Access.app traces it up thru a intermediate DoD Root to the Fed Bridge root, not the correct path to the DoD Root CA 3 (this root CA is in keychain Access.app and explicitly trusted). It is like Keychain Access.app is matching on name rather than cert. Not sure how we get to this state but the only resolution is to reboot the system. It has occurred with multiple sites. At one point I was able to open two sessions to the same site and in a side by side windows show each resolving the cert thru a different path. (picture attached, not sure if it will make it on the mail list.) CAC Behaviors ============ 2) User successfully authenticates to the site with their CAC. After ~20-30 seconds on a page, when he clicks on a link, he is asked to enter his PIN to unlock his CAC again. This continues during the entire session. While the is happening, if he opens Keychain Access.app, the CAC shows as locked. 3) User unlocks CAC in Keychain Access.app, launches the browser, then tries to authenticate to the site. The browser just hangs until the CAC is removed from the reader, then the slider will appear to select from the other soft certs on the system (e.g. ECA). 4) Insert CAC into reader while Keychain Access.app is open and it never appears. This is different from past behavior of Keychain Access.app. 4a) Quit Keychain Access.app, reinsert CAC. The CAC appears on the left as a keychain but nothing appears on the right; clicking the lock prompts for PIN but doesn’t actually unlock. Browser does not see any cert; removing CAC from reader allows the browser slider to appear and see the other soft certs on the system. Thanks for any input. We are going to try some other middleware but otherwise not sure of options. Peter Walsh Jackpine Technologies Corp. peter.walsh(a)jackpinetech.com c. 617/816-6001

3 3

[SCSSU-201801] Addresses CVE-2018-4300 & CVE-2018-4301 in Project
by Shawn A. Geddis 31 Jul '18

31 Jul '18

SmartCardServices Community, I wanted to highlight that a security fix [SCSSU-201801] <http://smartcardservices.macosforge.org/trac/wiki/security> for addressing the following CVEs was merged into the project on May 28, 2018. They will be included in the next release of installers. However, each one of you that has developed your own Tokend for macOS, will want to ensure you pickup the changes. The fix was noted in PR-155 <https://github.com/smartcardservices/smartcardservices/pull/155> And the source code diffs are at Files Changed <https://github.com/smartcardservices/smartcardservices/pull/155/files> if any of you have any questions, fire away here on the list. - Shawn _____________________________________________________________________ Shawn Geddis geddis @ {icloud, me, mac} . com Security and Certifications Engineer geddis @ {apple} . com  Platform Security / SEAR Apple Inc. Smart Card Services Project/Dev Lead: Project Wiki: [https://smartcardservices.github.io <https://smartcardservices.github.io/>] Mailing Lists: [Lists.MacOSForge.Org/mailman/listinfo <http://lists.macosforge.org/mailman/listinfo>] SCS Contact: [scs-cotact(a)macosforge.org <mailto:scs-cotact@macosforge.org>] SCS Admin: [scs-admin(a)macosforge.org <mailto:scs-admin@macosforge.org>] _____________________________________________________________________

1 0

MacOS High Sierra question
by Jason Lollar 06 Jun '18

06 Jun '18

Hello, My company supports the USAF at Nellis Air Force Base, NV and we are trying to connect CAC Card readers to our company laptops. I have not been successful as I can't seem to find the driver that supports MacOS High Sierra. Help please! Wilson *Jason "Wilson" Lollar* Deputy Detco, Nellis AFB Draken International, Inc. Cell: (757) 869-2697 Email: jlollar(a)drakenintl.com 3721 Freedom Circle BLDG 1770A, Rm 131A Nellis AFB, NV 89191

2 1

Smart Card Installer for OS X High Sierra -- Is there one?
by Lawrence M Coclough 15 May '18

15 May '18

Has a High Sierra Installer been released? If not, any workarounds?

1 0

Re: [SmartcardServices-Users] Mac OS High Sierra installer?
by Lawrence M. Coclough 11 May '18

11 May '18

Jason, Saw your post. I’m also looking for an installer for High Sierra. Were buy able to find one?

1 0

Mac OS High Sierra installer?
by Jason Lollar 15 Feb '18

15 Feb '18

I don't see an Installer for "High Sierra". When I tried opening the "Sierra" zip it said... *“Smart Card Services 2.1.2 [OSX 10.12]” is damaged and can’t be opened. You should move it to the Trash."* Help! Wilson *Jason "Wilson" Lollar* Deputy Detco, Nellis AFB Draken International, Inc. Cell: (757) 869-2697 Email: jlollar(a)drakenintl.com 3721 Freedom Circle BLDG 1770A, Rm 131A Nellis AFB, NV 89191

1 0

Re: [SmartcardServices-Users] TokenD replacement for OSx 10.12
by Blumenthal, Uri - 0553 - MITLL 09 Feb '18

09 Feb '18

We use OpenSC.tokend with OpenSC. Works with CODESIGN, works with Microsoft Outlook and Adobe Acrobat DC (and older 😉), works with MacOS Sierra 10.12.6 and High Sierra 10.13.3. Probably the latest SmartCardServices release can help too – somebody reported that it worked for them. I’m not using it because I insist on being able to rebuild the stuff from the source, and the build process for SmartCardServices has been nothing but atrocious (I don’t have time or desire to submerge into it). -- Regards, Uri Blumenthal From: SmartcardServices-Users <smartcardservices-users-bounces(a)lists.macosforge.org> on behalf of Ritesh Ranjan <ritranja(a)adobe.com> Date: Friday, February 09, 2018 at 11:52 To: SmartCardServices-Users <smartcardservices-users(a)lists.macosforge.org> Subject: [SmartcardServices-Users] TokenD replacement for OSx 10.12 Hi team, We are currently using tokend , compatible till OS X 10.7,to interact with our HSM box. This HSM box holds the private key and signs the hash of the file , we need to sign , using CODESIGN command. However, we came to know that apple has deprecated the CDSA architecture and tokend modules would no longer be provided. Hence, can u please guide us as to how can we port our tokend to support OS X versions 10.11 and later? Any help would be highly appreciated. Regards, Ritesh Ranjan

1 0

TokenD replacement for OSx 10.12
by Ritesh Ranjan 06 Feb '18

06 Feb '18

Hi team, We are currently using tokend , compatible till OS X 10.7,to interact with our HSM box. This HSM box holds the private key and signs the hash of the file , we need to sign , using CODESIGN command. However, we came to know that apple has deprecated the CDSA architecture and tokend modules would no longer be provided. Hence, can u please guide us as to how can we port our tokend to support OS X versions 10.11 and later? Any help would be highly appreciated. Regards, Ritesh Ranjan

1 0