Skip to content

Conversation

@dengert
Copy link
Member

@dengert dengert commented Sep 6, 2022

Fixes #1531 starting at: #1531 (comment)
(This should have been a new issue, as the symptoms where the same, but causes were different.)

Card and applet are from PIVKey, Taglio LLC which has a PIV applet, which does not handle Select AID correctly and loses login state when a second Select AID is sent to the card.

card-piv.c can handle this if it knows the applet is from PIVKey. The only way today is from the ATR.

PIVKey was contacted and [email protected] provided list of ATRs which included previously known listed cards.

Note: Some of these cards may be used for other applets or even other vendors version of a PIV applet. But will only
be accepted by card-piv.c if the card responds to a SELECT PIV AID.

User reported in #1531 (comment) that adding ATR to opensc.conf worked. His card's ATR is in the new list in this commit.

On branch PIVKey-ATR
Changes to be committed:
modified: card-piv.c

Checklist
  • PKCS#11 module was tested using a PIVKey with ATR 3b:fc:18:00:00:81:31:80:45:90:67:46:4a:00:64:2d:70:c1:72:fe:e0:fe

In response to Issue OpenSC#1531, PIVkey was contacted to provide the list
of ATRs for curent PKvKey devices.

[email protected] provided list of ATRs which included previously known
cards.

Some of these ATRs may be used by other card drivers. But will only
be accepted by card-piv.c if the card responds to a SELECT PIV AID.

 On branch PIVKey-ATR
 Changes to be committed:
	modified:   card-piv.c
@Jakuje Jakuje merged commit fa2eab8 into OpenSC:master Sep 12, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Test of PKCS # 11 yields CKR_USER_NOT_LOGGED_IN (0x101)

3 participants