Ticket #112 (new defect)

Opened 2 years ago

Last modified 2 months ago

PKCS#11-Test with D-Trust-Cards failed!

Reported by: nospams Owned by: opensc-devel@…
Priority: high Milestone:
Component: pkcs11 Version: 0.11.1
Severity: blocker Keywords: D-Trust
Cc:

Description

Hallo. I have three different D-Trust-cards.

First I'd tried to sign some data from a file with OpenSC-PKCS#11-DLL. My Call-Stack:

My-Java-Stuff --> IAIK-PKCS#11-Wrapper --> OpenSC-PKCS#11-DLL

C_Sign_Init throws Exception: CKR_MECHANISM_INVALID (With a DLL from Nexus, everythings work fine.)

Next I tried the OpenSC-Tool:

pkcs11-tool --login --test

For the first two cards:

error: PKCS11 function C_SignFinal failed: CKR_GENERAL_ERROR (0x5)

For the third:

... Signatures: not implemented ...

So OpenSC-PKCS#11-Implementation won't work with D-Trust-Cards??? Thank's for any hint.

Bye, André

Attachments

opensc-errors.log (500 bytes) - added by snurniko 23 months ago.
opensc errors file (while trying to sign with d-trust card)
opensc-errors.2.log (500 bytes) - added by snurniko 23 months ago.
opensc errors file (while trying to sign with d-trust card)
opensc-debug.log (60.3 kB) - added by snurniko 23 months ago.
opensc debug file (while trying to sign with d-trust card)
saper-opensc-debug.log (115.4 kB) - added by saper 20 months ago.
OpenSC debug log (at the debug level 9: pkcs11 --slot -l -t )
saper-opensc-error.log (229 bytes) - added by saper 20 months ago.
OpenSC errorlog (pkcs11-tool --slot 0 -l -t)

Change History

Changed 2 years ago by martin

  • component changed from opensc to pkcs11

Please provide opensc-debug.log and pkcs11-spy.log files for the other pkcs11 implementation.

Changed 23 months ago by snurniko

opensc errors file (while trying to sign with d-trust card)

Changed 23 months ago by snurniko

opensc errors file (while trying to sign with d-trust card)

Changed 23 months ago by snurniko

opensc debug file (while trying to sign with d-trust card)

Changed 23 months ago by snurniko

  • priority changed from normal to high
  • severity changed from normal to blocker

Hello,

I experienced the same problem while trying to sign with a german d-trust card (issued by IHK). I tried:

./pkcs11-tool.exe -l -s -m SHA1-RSA-PKCS

and got:

error: PKCS11 function C_SignFinal failed: rv = CKR_GENERAL_ERROR (0x5)

I provide the appropriate error and debug files and hope for any solution.

Best regards, leo

Changed 20 months ago by saper

OpenSC debug log (at the debug level 9: pkcs11 --slot -l -t )

Changed 20 months ago by saper

OpenSC errorlog (pkcs11-tool --slot 0 -l -t)

Changed 6 months ago by airforce1

Changed 3 months ago by add

http://www.salewroughtiron.cn installing metal stair rails Interior stair handrail installing metal stair rails Interior stair handrail exterior baluster Glass wood stainless wrought CONTEMPORARY designs stairways aluminum modern log banister DECK outdoor price posts vinyl curved rails http://www.china-made-door.com.cn door gate http://www.beijing-door.cn wrought CONTEMPORARY designs stairways installing metal stair rails Interior stair handrail exterior baluster Glass wood stainless wrought CONTEMPORARY designs stairways aluminum modern log banister DECK outdoor price posts vinyl curved rails http://www.hebei-railings.cn aluminum modern log banister DECK outdoor price installing metal stair rails Interior stair handrail exterior baluster Glass wood stainless wrought CONTEMPORARY designs stairways aluminum modern log banister DECK outdoor price posts vinyl curved rails posts vinyl curved rails

Changed 2 months ago by china

china tour Apparel shoes bags Kitchen Food and Wine Furniture) Flowers and Gifts Wall Art Computer Components

I still prefer a wiki like approach since the php (or mysql) docs are very cluttered when you have to take their comments in account. On the other hand they are professionally maintained imho, since they are *much* better than KDE documentation. KDE is by far larger and has so many different apps, which need screenshots and end user not dev/api docs, that more help is needed as long as the devs prefer to code than to write nice docs. And it is their choice to some degree imo. Technically interested but non-dev end users, which are plenty out there, are the users of and the best contributers to the docs, since they know what to write about. And they are certainly more than devs

Note: See TracTickets for help on using tickets.