VivoKey/vsmartcard
7
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

ignoring CVCA certificate for --disable-checks

Browse Source 
This essentially lets the terminal's DVCA certificate to be imported
without being checked using the CVCA trust anchor.
This commit is contained in:
Frank Morgner
2012-10-04 11:09:30 +02:00
parent d9ce98765f
commit 25b75d7ffe
1 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
virtualsmartcard/src/vpicc/virtualsmartcard/cards/nPA.py
View File

@@ -301,12 +301,14 @@ class nPA_SE(Security_Environment):
result = [[0x86, len(my_token), my_token]] result = [[0x86, len(my_token), my_token]]
if self.at.chat: if self.at.chat:
if not pace.EAC_CTX_init_ta(self.eac_ctx, None, None, self.ca):
pace.print_ossl_err()
raise SwError(SW["WARN_NOINFO63"])
result.append([0x87, len(self.ca), self.ca]) result.append([0x87, len(self.ca), self.ca])
if (self.disable_checks): if (self.disable_checks):
pace.TA_disable_checks(self.eac_ctx) pace.TA_disable_checks(self.eac_ctx)
else:
if not pace.EAC_CTX_init_ta(self.eac_ctx, None, None, self.ca):
pace.print_ossl_err()
raise SwError(SW["WARN_NOINFO63"])
return 0x9000, nPA_SE.__pack_general_authenticate(result) return 0x9000, nPA_SE.__pack_general_authenticate(result)