Tokend-Dev

Download

tokend-dev@lists.macosforge.org

July 2010

2 participants
2 discussions

PKCS#11 Tokend module?
by Cristian Thiago Moecke 14 Dec '11

14 Dec '11

Hello all! My name is Cristian, and I'm a Brazilian graduate student, researching PKI themes. I've just bought me a Macbook Pro, and I was looking for a way to make my epass2k token work on Mac OS X 10.6 (Snow Leopard). But "PRONOVA" don't provide a tokend module. They provide a PKCS#11 module only for Mac. So I can use firefox and thunderbird, but not safari, chrome, java, mail and everithing else I would like to use with it. I must say I've got a bit disappointed on the lack of support for PKCS#11 on Mac OS X Keychain. I've read that Apple don't want it because of the need to point to dynlibs... I can understand, but I would be happy even if the option was available by editing some config file or running terminal commands. But ok, stop complaining, I'm on mac for 3 weeks now and this is my first and only complaint until now, that is good. Since I'm a programmer, since I've come from the Linux world and since I've got some friends here that also are programmers, also use mac, also would like to use PKCS#11 modules on theis Mac Keychain, and also would enjoy giving a solution for this, I'm interested on try to develop a Tokend module that works as an interface to user provided PKCS#11 dynlibs. I would like to know: - if you have heard about someone already trying/doing this (I've found this slides: http://middleware.internet2.edu/pki06/proceedings/dinapoli-pkcs11-mac.pdf, from 2006... I'm trying to contact the author. But found nothing else). - if there is already a documentation to people like me, that want to develop his first Tokend module. On the website I've found only user documentation, not developer documentation. Regards, -- Cristian Thiago Moecke contato(a)cristiantm.com.br

5 6

PIV Auth with CRL Checks
by Bram Cymet 21 Jul '10

21 Jul '10

Hi, I hope this is the right list to send this to and if it is not please let me know where the right place would be. I have successfully got PIV cards working for login and screensaver access under Snow Leopard. The problem I am having is that it seems to ignore the fact that Keychain Access sees the certs on the cards as being revoked. Is it possible with the current Tokend/Smartcardservices to make it so that if a cert has been revoked that a person using that card is no longer able to log into the system? Or will I have to make some modifications to get this functionality working? Thanks, -- Bram Cymet Software Developer Canadian Bank Note Co. Ltd. Cell: 613-608-9752

2 1