documentation about setting OPENSC_CONF

This commit is contained in:
Frank Morgner
2014-06-19 22:32:06 +02:00
parent 800595efff
commit 8fe3880f58
2 changed files with 24 additions and 8 deletions

View File

@@ -191,7 +191,15 @@ Using the German identity card with OpenSC
To let OpenSC recognize the German ID card we implemented an external card To let OpenSC recognize the German ID card we implemented an external card
driver. We supply a sample :file:`opensc.conf` which adds our driver to all driver. We supply a sample :file:`opensc.conf` which adds our driver to all
components of OpenSC. components of OpenSC. Load it by setting :envvar:`OPENSC_CONF`::
export OPENSC_CONF=$VSMARTCARD/npa/opensc.conf
On Windows you need to use :command:`set` instead of :command:`export`. In
:file:`npa-0.6_win32` do the following::
cd bin
set OPENSC_CONF=..\etc\opensc.conf
The card driver recognizes the PIN verification method by it's ID. MRZ, CAN, The card driver recognizes the PIN verification method by it's ID. MRZ, CAN,
eID-PIN and PUK are verified using |PACE| (ID ``0x01``, ``0x02``, ``0x03`` and eID-PIN and PUK are verified using |PACE| (ID ``0x01``, ``0x02``, ``0x03`` and
@@ -199,7 +207,7 @@ eID-PIN and PUK are verified using |PACE| (ID ``0x01``, ``0x02``, ``0x03`` and
VERIFY command. Here, for example, we show how to verify the eID-PIN "123456" VERIFY command. Here, for example, we show how to verify the eID-PIN "123456"
with :command:`opensc-explorer`:: with :command:`opensc-explorer`::
OPENSC_CONF=$VSMARTCARD/npa/opensc.conf opensc-explorer opensc-explorer
OpenSC [3F00]> verify CHV3 313233343536 OpenSC [3F00]> verify CHV3 313233343536
Code correct. Code correct.
@@ -209,7 +217,7 @@ not support private key and certificate objects for qualified electronic
signature but only the PIN objects. For example, you can change the eID-PIN signature but only the PIN objects. For example, you can change the eID-PIN
using the :command:`pkcs15-tool`:: using the :command:`pkcs15-tool`::
OPENSC_CONF=$VSMARTCARD/npa/opensc.conf pkcs15-tool --change-pin --auth-id 03 \ pkcs15-tool --change-pin --auth-id 03 \
--pin=123456 --new-pin=abcdef # yes, an ASCII eID-PIN is allowed --pin=123456 --new-pin=abcdef # yes, an ASCII eID-PIN is allowed
When the eID-PIN was verified incorrectly three times, it is blocked and must When the eID-PIN was verified incorrectly three times, it is blocked and must

View File

@@ -191,7 +191,15 @@ Using the German identity card with OpenSC
To let OpenSC recognize the German ID card we implemented an external card To let OpenSC recognize the German ID card we implemented an external card
driver. We supply a sample :file:`opensc.conf` which adds our driver to all driver. We supply a sample :file:`opensc.conf` which adds our driver to all
components of OpenSC. components of OpenSC. Load it by setting :envvar:`OPENSC_CONF`::
export OPENSC_CONF=$VSMARTCARD/npa/opensc.conf
On Windows you need to use :command:`set` instead of :command:`export`. In
:file:`@PACKAGE_TARNAME@-@PACKAGE_VERSION@_win32` do the following::
cd bin
set OPENSC_CONF=..\etc\opensc.conf
The card driver recognizes the PIN verification method by it's ID. MRZ, CAN, The card driver recognizes the PIN verification method by it's ID. MRZ, CAN,
eID-PIN and PUK are verified using |PACE| (ID ``0x01``, ``0x02``, ``0x03`` and eID-PIN and PUK are verified using |PACE| (ID ``0x01``, ``0x02``, ``0x03`` and
@@ -199,7 +207,7 @@ eID-PIN and PUK are verified using |PACE| (ID ``0x01``, ``0x02``, ``0x03`` and
VERIFY command. Here, for example, we show how to verify the eID-PIN "123456" VERIFY command. Here, for example, we show how to verify the eID-PIN "123456"
with :command:`opensc-explorer`:: with :command:`opensc-explorer`::
OPENSC_CONF=$VSMARTCARD/npa/opensc.conf opensc-explorer opensc-explorer
OpenSC [3F00]> verify CHV3 313233343536 OpenSC [3F00]> verify CHV3 313233343536
Code correct. Code correct.
@@ -209,7 +217,7 @@ not support private key and certificate objects for qualified electronic
signature but only the PIN objects. For example, you can change the eID-PIN signature but only the PIN objects. For example, you can change the eID-PIN
using the :command:`pkcs15-tool`:: using the :command:`pkcs15-tool`::
OPENSC_CONF=$VSMARTCARD/npa/opensc.conf pkcs15-tool --change-pin --auth-id 03 \ pkcs15-tool --change-pin --auth-id 03 \
--pin=123456 --new-pin=abcdef # yes, an ASCII eID-PIN is allowed --pin=123456 --new-pin=abcdef # yes, an ASCII eID-PIN is allowed
When the eID-PIN was verified incorrectly three times, it is blocked and must When the eID-PIN was verified incorrectly three times, it is blocked and must