Hello all! My name is Cristian, and I'm a Brazilian graduate student, researching PKI themes. I've just bought me a Macbook Pro, and I was looking for a way to make my epass2k token work on Mac OS X 10.6 (Snow Leopard). But "PRONOVA" don't provide a tokend module. They provide a PKCS#11 module only for Mac. So I can use firefox and thunderbird, but not safari, chrome, java, mail and everithing else I would like to use with it. I must say I've got a bit disappointed on the lack of support for PKCS#11 on Mac OS X Keychain. I've read that Apple don't want it because of the need to point to dynlibs... I can understand, but I would be happy even if the option was available by editing some config file or running terminal commands. But ok, stop complaining, I'm on mac for 3 weeks now and this is my first and only complaint until now, that is good. Since I'm a programmer, since I've come from the Linux world and since I've got some friends here that also are programmers, also use mac, also would like to use PKCS#11 modules on theis Mac Keychain, and also would enjoy giving a solution for this, I'm interested on try to develop a Tokend module that works as an interface to user provided PKCS#11 dynlibs. I would like to know: - if you have heard about someone already trying/doing this (I've found this slides: http://middleware.internet2.edu/pki06/proceedings/dinapoli-pkcs11-mac.pdf, from 2006... I'm trying to contact the author. But found nothing else). - if there is already a documentation to people like me, that want to develop his first Tokend module. On the website I've found only user documentation, not developer documentation. Regards, -- Cristian Thiago Moecke contato@cristiantm.com.br
2010/2/3 Cristian Thiago Moecke <contato@cristiantm.com.br>:
Hello all!
Hello,
My name is Cristian, and I'm a Brazilian graduate student, researching PKI themes. I've just bought me a Macbook Pro, and I was looking for a way to make my epass2k token work on Mac OS X 10.6 (Snow Leopard). But "PRONOVA" don't provide a tokend module. They provide a PKCS#11 module only for Mac. So I can use firefox and thunderbird, but not safari, chrome, java, mail and everithing else I would like to use with it.
I must say I've got a bit disappointed on the lack of support for PKCS#11 on Mac OS X Keychain. I've read that Apple don't want it because of the need to point to dynlibs... I can understand, but I would be happy even if the option was available by editing some config file or running terminal commands. But ok, stop complaining, I'm on mac for 3 weeks now and this is my first and only complaint until now, that is good.
Since I'm a programmer, since I've come from the Linux world and since I've got some friends here that also are programmers, also use mac, also would like to use PKCS#11 modules on theis Mac Keychain, and also would enjoy giving a solution for this, I'm interested on try to develop a Tokend module that works as an interface to user provided PKCS#11 dynlibs. I would like to know:
- if you have heard about someone already trying/doing this (I've found this slides: http://middleware.internet2.edu/pki06/proceedings/dinapoli-pkcs11-mac.pdf, from 2006... I'm trying to contact the author. But found nothing else).
I don't think this tokend is maintained any more.
- if there is already a documentation to people like me, that want to develop his first Tokend module. On the website I've found only user documentation, not developer documentation.
You should have a look at [1]. It is a tokend above a PKCS#11 lib. It should be what you are looking for. Bye [1] http://smartcardservices.macosforge.org/trac/browser/trunk/Tokend/PKCS11 -- Dr. Ludovic Rousseau
Yes, this looks like what I need. That is great! I'll take a look and will be happy to test and help on what is needed. Is there any "begginers" tutorial to tokend development? Is my first time with xcode, I'm sure I'll get it to compile and get rid of the thousands of errors that appear when I open the xcode project, after some googling... but some quick starter tips may help :) Thaks a lot again. Cristian Em 04/02/10 11:16, Ludovic Rousseau escreveu:
2010/2/3 Cristian Thiago Moecke<contato@cristiantm.com.br>:
Hello all!
Hello,
My name is Cristian, and I'm a Brazilian graduate student, researching PKI themes. I've just bought me a Macbook Pro, and I was looking for a way to make my epass2k token work on Mac OS X 10.6 (Snow Leopard). But "PRONOVA" don't provide a tokend module. They provide a PKCS#11 module only for Mac. So I can use firefox and thunderbird, but not safari, chrome, java, mail and everithing else I would like to use with it.
I must say I've got a bit disappointed on the lack of support for PKCS#11 on Mac OS X Keychain. I've read that Apple don't want it because of the need to point to dynlibs... I can understand, but I would be happy even if the option was available by editing some config file or running terminal commands. But ok, stop complaining, I'm on mac for 3 weeks now and this is my first and only complaint until now, that is good.
Since I'm a programmer, since I've come from the Linux world and since I've got some friends here that also are programmers, also use mac, also would like to use PKCS#11 modules on theis Mac Keychain, and also would enjoy giving a solution for this, I'm interested on try to develop a Tokend module that works as an interface to user provided PKCS#11 dynlibs. I would like to know:
- if you have heard about someone already trying/doing this (I've found this slides: http://middleware.internet2.edu/pki06/proceedings/dinapoli-pkcs11-mac.pdf, from 2006... I'm trying to contact the author. But found nothing else).
I don't think this tokend is maintained any more.
- if there is already a documentation to people like me, that want to develop his first Tokend module. On the website I've found only user documentation, not developer documentation.
You should have a look at [1]. It is a tokend above a PKCS#11 lib. It should be what you are looking for.
Bye
[1]http://smartcardservices.macosforge.org/trac/browser/trunk/Tokend/PKCS11
-- Cristian Thiago Moecke contato@cristiantm.com.br
Hello, is anyone using Adobe Reader 9 on Mac OSX 10.5.x with Tokend? I'm experiencing following problem: when you try to sign a PDF with Adobe Reader (v9.4.6) with a certificate exposed by TokenD, in the signature dialog pushing on the "Sign" button just does nothing. If the certificate comes from a soft-keychain (i.e. the login keychain) the signature just works fine. On 10.6 and 10.7, with same Adobe Reader and same Tokend, instead all works fine. Regards, Giuseppe Amato
Giuseppe, Did you contact Adobe about this ? What was there diagnosis of the issue? Shawn Sent from my iPhone On Dec 12, 2011, at 4:08 AM, Giuseppe Amato <gam@bit4id.com> wrote:
Hello,
is anyone using Adobe Reader 9 on Mac OSX 10.5.x with Tokend?
I'm experiencing following problem: when you try to sign a PDF with Adobe Reader (v9.4.6) with a certificate exposed by TokenD, in the signature dialog pushing on the "Sign" button just does nothing. If the certificate comes from a soft-keychain (i.e. the login keychain) the signature just works fine.
On 10.6 and 10.7, with same Adobe Reader and same Tokend, instead all works fine.
Regards, Giuseppe Amato
I don't know how much effort you want to put into debugging this, but there is a pkcs11-spy library in the open-sc project. <http://www.opensc-project.org/opensc/wiki/UsingOpensc> If you configure Adobe reader to use the spy, and the spy to use Apple's pkcs11 then you can see what's being attempted, and maybe what's broken. On Dec 12, 2011, at 9:19 PM, Shawn Geddis wrote:
Giuseppe,
Did you contact Adobe about this ? What was there diagnosis of the issue?
Shawn
Sent from my iPhone
On Dec 12, 2011, at 4:08 AM, Giuseppe Amato <gam@bit4id.com> wrote:
Hello,
is anyone using Adobe Reader 9 on Mac OSX 10.5.x with Tokend?
I'm experiencing following problem: when you try to sign a PDF with Adobe Reader (v9.4.6) with a certificate exposed by TokenD, in the signature dialog pushing on the "Sign" button just does nothing. If the certificate comes from a soft-keychain (i.e. the login keychain) the signature just works fine.
On 10.6 and 10.7, with same Adobe Reader and same Tokend, instead all works fine.
Regards, Giuseppe Amato <smime.p7s>_______________________________________________ Tokend-Dev mailing list Tokend-Dev@lists.macosforge.org http://lists.macosforge.org/mailman/listinfo.cgi/tokend-dev
------------------------------------------------------ The opinions expressed in this message are mine, not those of Caltech, JPL, NASA, or the US Government. Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu
I've just written on the Adobe Reader forum, there isn't a real free support for Adobe's free products. http://forums.adobe.com/thread/937489?tstart=0 Regards, Giuseppe Amato On 13/12/2011 6.19, Shawn Geddis wrote:
Giuseppe,
Did you contact Adobe about this ? What was there diagnosis of the issue?
Shawn
Sent from my iPhone
On Dec 12, 2011, at 4:08 AM, Giuseppe Amato<gam@bit4id.com> wrote:
Hello,
is anyone using Adobe Reader 9 on Mac OSX 10.5.x with Tokend?
I'm experiencing following problem: when you try to sign a PDF with Adobe Reader (v9.4.6) with a certificate exposed by TokenD, in the signature dialog pushing on the "Sign" button just does nothing. If the certificate comes from a soft-keychain (i.e. the login keychain) the signature just works fine.
On 10.6 and 10.7, with same Adobe Reader and same Tokend, instead all works fine.
Regards, Giuseppe Amato
_______________________________________________ Tokend-Dev mailing list Tokend-Dev@lists.macosforge.org http://lists.macosforge.org/mailman/listinfo.cgi/tokend-dev
-- Giuseppe Amato http://www.bit4id.com gam@bit4id.com
participants (5)
-
Cristian Thiago Moecke
-
Giuseppe Amato
-
Henry B. Hotz
-
Ludovic Rousseau
-
Shawn Geddis