Christmas is coming soon! To thank for the support from all our dear customers, Christmas promotional activity is going on in JavaCardOS online store. For more activities details, please check this post.

RSA 2048

Communication

Moderator: UNKNwYSHSA

User avatar
Ibragim
Posts: 12
Joined: Sat Apr 15, 2017 3:23 am
Points :170
Location: Uzbekistan
Contact:

RSA 2048

Post by Ibragim » Sun Apr 16, 2017 4:13 am

Is there any open source applet for generating RSA key pair, signing tokens and storing windows certificates?
If it's possible, explain me, how can i store any .cer file in smartcard?

User avatar
UNKNwYSHSA
Posts: 630
Joined: Thu May 21, 2015 4:05 am
Points :3027
Contact:

Re: RSA 2048

Post by UNKNwYSHSA » Mon Apr 17, 2017 2:19 am

ISOApplet or other applet OpenSC supported.

I had test ISOApplet:
1 Init ISOApplet with command: pkcs15-init.exe -r 0 -C
2 Store certificate to the card: pkcs15-init.exe -r 0 -X C:\Users\xxx\Desktop\test.cer (The certificate is encoded with BASE64.)
3 List certificate: pkcs15-tool.exe --reader 0 -c

Code: Select all

X.509 Certificate [Certificate]
        Object Flags   : [0x2], modifiable
        Authority      : no
        Path           : 3f0050153400
        ID             : 45
        Encoded serial : 02 10 2C80892E0115B0B77AA3594B9A733953
sense and simplicity

User avatar
Ibragim
Posts: 12
Joined: Sat Apr 15, 2017 3:23 am
Points :170
Location: Uzbekistan
Contact:

Re: RSA 2048

Post by Ibragim » Tue Apr 18, 2017 12:23 am

During pkcs15-init -r 0 -C i got:
"New User PIN.
Please enter User PIN: Please type again to verify: Unblock Code for New User PIN (Optional - press return for no PIN).
Please enter User unblocking PIN (PUK): Please type again to verify: Failed to create PKCS #15 meta structure: Transmit failed".
Why it could happen?

I have ACR 1281 1s dual reader, and ACOSJ Combi cards.

User avatar
UNKNwYSHSA
Posts: 630
Joined: Thu May 21, 2015 4:05 am
Points :3027
Contact:

Re: RSA 2048

Post by UNKNwYSHSA » Tue Apr 18, 2017 1:24 am

The parameter -r 0 means using reader with index 0.
Maybe the reader you using now is not the first one.
use command opensc-tool.exe -l to list readers on your computer.
sense and simplicity

User avatar
Ibragim
Posts: 12
Joined: Sat Apr 15, 2017 3:23 am
Points :170
Location: Uzbekistan
Contact:

Re: RSA 2048

Post by Ibragim » Tue Apr 18, 2017 2:11 am

I've chosen right reader index :) . I think that smth with my smartcard, because in OpenSC wiki written, that ACOS5 isn't supported, as i've ACOSJ, maybe problem is in smartcard?

User avatar
UNKNwYSHSA
Posts: 630
Joined: Thu May 21, 2015 4:05 am
Points :3027
Contact:

Re: RSA 2048

Post by UNKNwYSHSA » Tue Apr 18, 2017 3:57 am

Is the ISOApplet loaded and installed to your card?
sense and simplicity

User avatar
Ibragim
Posts: 12
Joined: Sat Apr 15, 2017 3:23 am
Points :170
Location: Uzbekistan
Contact:

Re: RSA 2048

Post by Ibragim » Tue Apr 18, 2017 4:06 am

Yes, installed, but not default selected

User avatar
UNKNwYSHSA
Posts: 630
Joined: Thu May 21, 2015 4:05 am
Points :3027
Contact:

Re: RSA 2048

Post by UNKNwYSHSA » Tue Apr 18, 2017 5:17 am

I try it when install without default selected privilege, it is OK yet.
Is there's other question(s) with your card?

Which applet you loaded? Give me the url.
sense and simplicity

User avatar
Ibragim
Posts: 12
Joined: Sat Apr 15, 2017 3:23 am
Points :170
Location: Uzbekistan
Contact:

Re: RSA 2048

Post by Ibragim » Tue Apr 18, 2017 5:21 am

Is there another applet or way for storing windows .cer files. And if it's possible explain me how does windows logging on works?
where windows trying to find authorization data? What does this data looks like?

User avatar
UNKNwYSHSA
Posts: 630
Joined: Thu May 21, 2015 4:05 am
Points :3027
Contact:

Re: RSA 2048

Post by UNKNwYSHSA » Tue Apr 18, 2017 5:25 am

For windows login?
Maybe you are looking for this article.
https://javacardos.com/wiki/Article/det ... dsApp.html
sense and simplicity

Post Reply Previous topicNext topic

Who is online

Users browsing this forum: No registered users and 1 guest

JavaCard OS : Disclaimer