Thanks for the pointers...it was the CFM path issue that was tripping me up.

I ran into several stability issues with the drivers and with the
Mozilla code, but if one is patient and gentle enough with the code, it
*does* work. Wow, this is really fantastic! it's not ready for
production, but it's working much better than I thought it would. :)

I tested SSL client-auth to websites and mail servers, both of which
work. (not fast, mind you, but it does work). If this mail goes
through, it's also signed with my cert stored on my smartcard..very,
very cool.

Thanks again for the help!

bill

p.s. Netscape 7 PR1 has a bug in the NSS code that prohibits
Mozilla/Netscape from prompting users for the smartcard password. If
the user is *already* logged into the card, cert selection should work.
 This has been fixed in subsequent daily builds. maybe that was the
issue you were running into, Jean-Luc.

Jean-Luc Giraud wrote:

>
> On Monday, July 15, 2002, at 08:15 pm, Bill Burns wrote:
>
>> Hi Dave,
>>
>> I have a CAC card, a Gemplus 430PC reader and a new TiBook running
>> Mac OS X. I've installed the latest MUSCLEcard software and Gemplus
>> drivers. The pcsctest and pcsctool programs correctly identify the
>> card insertion/removal so I think the basic subsystems are working OK.
>
>
> Good start :).
>
>> The part I'm getting stuck at is finding the PKCS#11 module to
>> install into Mozilla or Netscape 7. The obvious file (/pkcs11.shlb)
>> isn't recognized in Mozilla as a valid PKCS#11 module and the other
>> other likely file
>> (/usr/local/lib/pkcs11.bundle/Contents/MacOS/pkcs11) also doesn't work.
>
>
> You have to use Mozilla 1.1 alpha (Netscape 7.0 pr1 did not work for
> me). You also have to copy and paste the path with Apple sepratators
> ie ":YourVolume:pkcs11.shlb" as Mozilla is a Carbon app.
>
> You should then see the P11. As I said earlier, thawte.com worked but
> required that I use the SW token first and then export the key and
> re-import it in the card.
>
>> I hope I didn't miss an obvious README file, but what is the filename
>> for the Netscape PKCS#11 module?
>
>
> There is a bit of a lack of a README file...
>
>
> Cheers,
> JLuc.
>

• application/x-pkcs7-signature attachment: S/MIME Cryptographic Signature

***************************************************************
Unix Smart Card Developers - M.U.S.C.L.E.
(Movement for the Use of Smart Cards in a Linux Environment)
http://www.linuxnet.com/
To unsubscribe send an email to majordomolinuxnet.com with
unsubscribe sclinux
***************************************************************

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]