<div dir="ltr"><div>Thanks. Is there any documentation available that shows where the new tokend installations should go?<br><br></div>Does this installation location happen to work for older OSX versions, or is the location only scanned by OSX 10.11? If this location is only for newer versions of OSX, this complicates things for users that install an application on 10.10 or earlier and come to OSX 10.11 to discover their TokenD was obliterated.<br><br> Smart card development for OSX seems to be a particularly dark art. By
chance are there any samples of TokenD modules written using Apple's new blessed token API - the asynchronous nature of the new API seems to be in conflict with TokenD API specifications.<br><div><div><br><div class="gmail_quote"><div dir="ltr">On Thu, Oct 1, 2015 at 11:17 AM Shawn A. Geddis <<a href="mailto:geddis@apple.com">geddis@apple.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word"><div style="margin:20px;font-family:'Lucida Grande',Verdana,Arial,Helvetica,sans-serif;font-size:13px"><div style="width:1101.421875px;font-weight:bold;font-size:1.2em;margin-bottom:20px;vertical-align:middle;border-bottom-width:thin;border-bottom-style:dotted;border-bottom-color:rgb(68,68,68)"><a href="https://smartcardservices.macosforge.org/post/signed-installer-posted-for-os-x-el-capitan-v1011/" style="font-size:1.2em;color:rgb(0,0,204);text-decoration:none;border-bottom-style:none" target="_blank">Signed Installer posted for OS X El Capitan v10.11</a></div><div style="font-size:0.8em;float:right;font-weight:bold">2015-10-01</div><div style="padding-left:10px"><p>Installer posted for OS X El Capitan v10.11. </p><p>This SmartCardServices Installer provides the Tokend bundles and cacloginconfig.plist for installation on your OS X El Capitan systems. </p><p>Starting with today's (1 Oct 2015) release of the installer for OS X El Capitan v10.11, we are digitally signing the Installer and Tokend bundles for integrity assurance. The installer will be recognized and install properly with Gatekeeper set to default or higher and, on El Capitan, are installed in a new location "/ Library / Security / tokend" to work with System Integrity Protection (SIP) enabled.</p><div>____________________________________________________________________________________</div><p><b>NOTE:</b> Installer and Tokend bundles from this project are now digitally signed. Older installers (ie. for v10.10, v10.9, ...) will be re-posted, incremented to v2.1, and digitally signed. The installation location will remain as they were on the respective OS releases.</p><div>____________________________________________________________________________________</div><p>You should verify the integrity of the Tokend(s) you have installed by verifying the digital signature using the following command in Terminal:</p><div style="white-space:pre-wrap;font-family:courier,monospace;font-size:10px;background-image:none;background-color:rgb(247,247,247);border:1px solid rgb(215,215,215);margin:1em 1.75em;overflow:auto;padding:0.25em;background-repeat:repeat repeat">$ codesign -dvvvv /Library/Security/tokend/<nameoftoken>.tokend</div><p>for example:</p><div style="white-space:pre-wrap;font-family:courier,monospace;font-size:10px;background-image:none;background-color:rgb(247,247,247);border:1px solid rgb(215,215,215);margin:1em 1.75em;overflow:auto;padding:0.25em;background-repeat:repeat repeat">$ codesign -dvvvv /Library/Security/tokend/PIV.tokend</div><p>Your results should be similar to the following:</p><p><span style="font-size:x-small;white-space:pre-wrap;background-color:rgb(247,247,247)">$ <b>codesign -dvvvv /Library/Security/tokend/PIV.tokend/</b></span></p><p><span style="font-size:x-small"><i>Executable=/Library/Security/tokend/PIV.tokend/Contents/MacOS/PIV</i></span></p><p><span style="font-size:x-small"><i>Identifier=org.macosforge.smartcardservices.tokend.piv</i></span></p><p><span style="font-size:x-small"><i>Format=bundle with Mach-O thin (x86_64)</i></span></p><p><span style="font-size:x-small"><i>CodeDirectory v=20200 size=1307 flags=0x0(none) hashes=57+3 location=embedded</i></span></p><p><span style="font-size:x-small"><i>Hash type=sha1 size=20</i></span></p><p><span style="font-size:x-small"><i>CDHash=9211409073a5f9034a523b891918cbf8030a6b84</i></span></p><p><span style="font-size:x-small"><i>Signature size=4349</i></span></p><p><span style="font-size:x-small"><i><b>Authority=Mac Developer: Shawn Geddis (6NSF8PH78P)</b></i></span></p><p><span style="font-size:x-small"><i><b>Authority=Apple Worldwide Developer Relations Certification Authority</b></i></span></p><p><span style="font-size:x-small"><i><b>Authority=Apple Root CA</b></i></span></p><p><span style="font-size:x-small"><i>Signed Time=Sep 29, 2015, 9:06:58 PM</i></span></p><p><span style="font-size:x-small"><i>Info.plist entries=9</i></span></p><p><span style="font-size:x-small"><i>TeamIdentifier=L2L8FX9AEK</i></span></p><p><span style="font-size:x-small"><i>Sealed Resources version=2 rules=12 files=5</i></span></p><p><span style="font-size:x-small;white-space:pre-wrap;background-color:rgb(247,247,247)"><i>Internal requirements count=1 size=92</i></span></p><div><br></div><p>To ensure you have the original installer posted here and not one that has been modified, please also verify the SHA-256 hash of the .zip you download against the hash posted for the corresponding installer from the installers download page. </p><p><a title="SmartCardServices Installers" href="https://smartcardservices.macosforge.org/trac/wiki/installers" style="font-size:11px;font-weight:bold;color:rgb(0,0,204);text-decoration:none;border-bottom-style:none" target="_blank">http://smartcardservices.macosforge.org/trac/wiki/installers/</a></p><div><hr><p>Recall, we also post installers under a “Current” Static URL as well.</p></div></div></div><div style="margin:20px"><div style="padding-left:10px"><p style="font-family:'Lucida Grande',Verdana,Arial,Helvetica,sans-serif;font-size:13px"><b>SmartCard Services "Current"</b> - Most recent Installer (i.e v2.1.0 for OS X El Capitan v10.11)</p><p style="font-family:'Lucida Grande',Verdana,Arial,Helvetica,sans-serif;font-size:13px"><a title="http://smartcardservices.macosforge.org/files/installers/SCS-Current.zip" href="https://smartcardservices.macosforge.org/files/installers/SCS-Current.zip" style="font-size:11px;font-weight:bold;color:rgb(0,0,204);text-decoration:none;border-bottom-style:none" target="_blank">http://smartcardservices.macosforge.org/files/installers/SCS-Current.zip</a></p><hr style="font-family:'Lucida Grande',Verdana,Arial,Helvetica,sans-serif;font-size:13px"><p style="font-family:'Lucida Grande',Verdana,Arial,Helvetica,sans-serif;font-size:13px">The static URL for the most recent installer versions corresponding to each major release of OS X follows the format:</p><p style="font-family:'Lucida Grande',Verdana,Arial,Helvetica,sans-serif;font-size:13px"><b><a href="http://smartcardservices.macosforge.org/files/installers/SCS-XX.YY-Current.zip" target="_blank">http://smartcardservices.macosforge.org/files/installers/SCS-XX.YY-Current.zip</a></b></p><p style="font-family:'Lucida Grande',Verdana,Arial,Helvetica,sans-serif;font-size:13px"><b> </b> <b>XX</b> - 10</p><p style="font-family:'Lucida Grande',Verdana,Arial,Helvetica,sans-serif;font-size:13px"> <b>YY</b> - Major Release (i.e '09' for OS X Mavericks v10.9)</p><ul><li><font face="Helvetica"><span style="font-size:12px">"<font><a href="https://smartcardservices.macosforge.org/files/installers/SCS-10.11-Current.zip" target="_blank">Current - OS X El Capitan v10.11</a>”</font></span></font></li><li><font face="Helvetica"><span style="font-size:12px">"<a href="https://smartcardservices.macosforge.org/files/installers/SCS-10.10-Current.zip" target="_blank">Current - OS X Yosemite v10.10</a>”</span></font></li><li><font color="#000000" face="Helvetica"><span style="font-size:12px"><a href="https://smartcardservices.macosforge.org/files/installers/SCS-10.09-Current.zip" target="_blank">"Current - OS X Mavericks v10.9</a>”</span></font></li><li><font color="#000000" face="Helvetica"><span style="font-size:12px"><a href="https://smartcardservices.macosforge.org/files/installers/SCS-10.08-Current.zip" style="border-bottom-style:none" target="_blank">"Current - OS X Mountain Lion v10.8</a>”</span></font></li><li><font color="#000000" face="Helvetica"><span style="font-size:12px"><a href="https://smartcardservices.macosforge.org/files/installers/SCS-10.07-Current.zip" style="border-bottom-style:none" target="_blank">"Current - OS X Lion v10.7</a>”</span></font></li><li><font color="#000000" face="Helvetica"><a href="https://smartcardservices.macosforge.org/files/installers/SCS-10.06-Current.zip" target="_blank">"Current - OS X Snow Leopard v10.6"</a></font></li></ul></div></div><div>
<div style="color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><div style="font-variant:normal;letter-spacing:normal;line-height:normal;text-align:-webkit-auto;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;word-wrap:break-word"><span style="border-collapse:separate;line-height:normal;border-spacing:0px"><div style="word-wrap:break-word"><font style="color:rgb(0,0,0)" face="Helvetica"><span style="font-size:12px"><br></span></font></div><div style="word-wrap:break-word"><font style="color:rgb(0,0,0)" face="Helvetica"><span style="font-size:12px">- Shawn<br>_____________________________________________________________________<br>Shawn Geddis<span style="white-space:pre-wrap"> </span> <span style="white-space:pre-wrap"> </span> </span></font><font face="Helvetica"><span style="font-size:12px">geddis at {Mac | Me | iCloud} dot com</span></font><font style="color:rgb(0,0,0)" face="Helvetica"><span style="font-size:12px"><br></span></font><span>Security and Certifications Engineer</span><font style="color:rgb(0,0,0)" face="Helvetica"><span style="font-size:12px">, Apple geddis at </span></font><span style="font-family:Helvetica;font-size:12px;text-align:-webkit-auto">{</span><span style="font-size:12px;font-family:Helvetica;text-align:-webkit-auto">apple} dot com</span></div><div style="word-wrap:break-word"><font style="color:rgb(0,0,0)" face="Helvetica"><span style="font-size:12px"><br>Smart Card Services<span> </span> Project/Dev Lead: <br><span style="white-space:pre-wrap"> </span>Project Wiki:<span style="white-space:pre-wrap"> </span> [<a href="http://SmartCardServices.MacOSFforge.Org" target="_blank">SmartCardServices.MacOSFforge.Org</a>]<br><span style="white-space:pre-wrap"> </span>Mailing Lists:<span style="white-space:pre-wrap"> </span> [<a href="http://lists.macosforge.org/mailman/listinfo" target="_blank">Lists.MacOSForge.Org/mailman/listinfo</a>]</span></font></div><div style="color:rgb(0,0,0);word-wrap:break-word"><font face="Helvetica"><span style="font-size:12px"><span style="white-space:pre-wrap"> </span>SCS Contact:<span style="white-space:pre-wrap"> </span> [<a href="mailto:scs-cotact@macosforge.org" target="_blank">scs-cotact@macosforge.org</a>]</span></font></div><div style="color:rgb(0,0,0);word-wrap:break-word"><font face="Helvetica"><span style="font-size:12px"><span style="white-space:pre-wrap"> </span>SCS Admin:<span style="white-space:pre-wrap"> </span> [<a href="mailto:scs-admin@macosforge.org" target="_blank">scs-admin@macosforge.org</a>]</span></font></div><div style="color:rgb(0,0,0);word-wrap:break-word"><font face="Helvetica"><span style="font-size:12px">_____________________________________________________________________</span></font><br></div></span></div></div></div></div></div></div></div></div></div>
</div>
<br></div>_______________________________________________<br>
SmartcardServices-Dev mailing list<br>
<a href="mailto:SmartcardServices-Dev@lists.macosforge.org" target="_blank">SmartcardServices-Dev@lists.macosforge.org</a><br>
<a href="https://lists.macosforge.org/mailman/listinfo/smartcardservices-dev" rel="noreferrer" target="_blank">https://lists.macosforge.org/mailman/listinfo/smartcardservices-dev</a><br>
</blockquote></div></div></div></div>