OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Vesa Suontama (vsuontamssh.com)
Date: Thu Nov 01 2001 - 00:52:28 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    You may want to check out SSH Accession, which supports PKCS#15 compliant
    Sclumberger cards through PKCS#11 interface (both Linux and Windows).
    http://www.ssh.com/products/certifierEU/specifications.cfm
    It uses MUSCLE for accessing readers in *nix, and PCSC readers in Windows.

    We also provide tools for personalizing smart cards. (See Token Master).

    Regards,

    Vesa

    > -----Original Message-----
    > From: owner-sclinuxdrizzle.com [mailto:owner-sclinuxdrizzle.com]On
    > Behalf Of Shelby Evans
    > Sent: 31. lokakuuta 2001 20:34
    > To: sclinuxlinuxnet.com
    > Subject: Re: MUSCLE Cryptoflex and Linux
    >
    >
    > Radovan,
    > If you buy a Reflex 72 reader to use with the Cryptoflex card, to
    > communicate with the Cryptoflex smart card on Linux you will need
    > 1. PC/SC Lite for Unix from http://www.linuxnet.com/middle.html
    > 2. MUSCLE Reflex 72 Driver http://www.linuxnet.com/sourcedrivers.html
    > See
    > http://www.strongsec.com/smartcards/howto/html/SmartCard-Login-HOW
    > TO-2.html
    > for pretty good instructions on how to get everything set up.
    >
    > On a Windows platform, you can interface the PKCS#11 library that comes
    > with Schlumberger SDK4.1 and download a certificate onto the card.
    > Since Schlumberger doesn't have a Linux version of their PKCS#11 library
    > you can't do this on a Linux platform.
    >
    > I've looked and have not been successful in finding a PKCS#11 interface
    > which runs on Linux and talks to the Cryptoflex smart card - or any
    > smartcard for that matter. The only PKCS#11 library I have found that
    > runs on a Linux platform is gpkcs#11
    > (http://sourceforge.net/projects/gpkcs11) and this currently only works
    > with a software token. For the project I'm working on this has forced
    > me to begin designing and developing a "mini-"PKCS#11 library that does
    > just the PKCS#11 stuff necessary for the project which includes
    > generating an RSA key pair, storing a certificate on the card, and
    > hashing and signing data. You may want to consider doing something
    > similar if you need to work on a Linux platform. Of course, the
    > interface that you would need to develop would have to be developed in
    > such a way that it can be added into Netscape as a Cryptographic
    > Module. This is not necessary for my current project.
    >
    > -Shelby
    >
    >
    >
    >
    >
    > Radovan Semancik wrote:
    > >
    > > Hello,
    > >
    > > just a quick question, before I'll spend some money:
    > >
    > > Can I use Schlumberger cryptoflex smart card in Linux for storing X.509
    > > certificates?
    > > (PKCS#11 interface for netscape)
    > >
    > > What software tools I will need to make it work?
    > >
    > > --
    > > Ing. Radovan Semancik (semancikbgs.sk)
    > > Project Manager, Business Global Systems a.s.
    > > ***************************************************************
    > > Unix Smart Card Developers - M.U.S.C.L.E.
    > > (Movement for the Use of Smart Cards in a Linux Environment)
    > > http://www.linuxnet.com/
    > > To unsubscribe send an email to majordomolinuxnet.com with
    > > unsubscribe sclinux
    > > ***************************************************************
    >
    > --
    > Shelby A. Evans
    > Senior Software Engineer
    > Information Security Department
    >
    > BBN Technologies
    > 9861 Broken Land Parkway, Suite 156
    > Columbia, MD 21046
    >
    > Phone: 410-312-6993
    > Fax: 410-312-6931
    > e-mail: saevansbbn.com
    > ***************************************************************
    > Unix Smart Card Developers - M.U.S.C.L.E.
    > (Movement for the Use of Smart Cards in a Linux Environment)
    > http://www.linuxnet.com/
    > To unsubscribe send an email to majordomolinuxnet.com with
    > unsubscribe sclinux
    > ***************************************************************
    >

    ***************************************************************
    Unix Smart Card Developers - M.U.S.C.L.E.
    (Movement for the Use of Smart Cards in a Linux Environment)
    http://www.linuxnet.com/
    To unsubscribe send an email to majordomolinuxnet.com with
    unsubscribe sclinux
    ***************************************************************