-
Notifications
You must be signed in to change notification settings - Fork 803
Description
Problem Description
I have a company-issued Gemalto IDPrime 940 (allegedly) with a user certificate on it used for logging into our infrastructure. I've been given the task of investigating integration with Linux without the use of proprietary modules to interface with the card, and am currently experimenting with OpenSC 0.24.0-rc2.
The card is properly recognized as an IDPrime 940 by OpenSC, and I can successfully authenticate with it using my PIN. However, none of the tools available (pkcs11-tool, pkcs15-tool, opensc-tool, etc) display any certificates on the card.
There should be a single RSA2048 certificate issued to me with the appropriate attributes for smartcard login on the card, and I've verified that that is the case on a Windows machine running Net iD Access (the proprietary module currently in use).
Steps to reproduce
- Insert a Gemalto IDPrime 940 card with at least one certificate on the token
- Run
pkcs11-tool --login -O - Observe no listed certificates
Logs
I believe I've redacted any sensitive data in the logs; however, I'd very much appreciate a heads-up if I haven't.