Commit Graph

85 Commits

Author SHA1 Message Date
Frank Morgner
0aa531f25b allow TA without PACE 2014-09-15 07:26:12 +02:00
Frank Morgner
3dddf0e809 use unified names for PACE secrets 2014-02-28 23:47:11 +01:00
Frank Morgner
d81491f4ea better PIN handling
- avoid overloading of the unblocking command, instead perform resuming
  the pin automatically.
- implemented cache for npa card driver
- added support for eSign PIN verification
- addes support for get pin info cmd
2014-02-28 23:19:42 +01:00
Frank Morgner
6b7d42000b fixed resuming the PIN
initialization of the boxing commands in perform_pace always destroyed
the established security context.
2014-02-23 01:16:53 +01:00
Frank Morgner
a11be64015 catch and debug more errors 2013-10-21 21:01:08 +02:00
Frank Morgner
49b01ca750 adapted to changes of openpace ce89f8ee374d7926c3f4707b8c4d3ae3de506507 2013-08-21 07:30:08 +02:00
Frank Morgner
360ab99624 use sc_format_apdu where possible 2013-06-14 17:38:29 +02:00
Frank Morgner
70d10b9410 cleaned up scutils
- moved write/read_binary_rec to scutil.c
- removed unused handling of card driver
2013-06-13 08:25:11 +02:00
Frank Morgner
f73f5a328d fixed memory leak 2013-06-12 21:35:35 +02:00
Frank Morgner
32a198f35b updated license text 2013-06-11 09:21:32 +02:00
Frank Morgner
9236fc5e2e fixed missing initialization of sm_ctx for PACE on reader 2013-06-09 23:23:36 +02:00
Frank Morgner
eef401af00 allow changing eID-PIN on reader's PIN pad 2013-06-09 23:23:36 +02:00
Frank Morgner
58055517ed implemented boxing commands according to TR-03119 2013-06-09 23:23:36 +02:00
Frank Morgner
e1da1dc081 updated documentation 2013-02-09 23:44:14 +01:00
Frank Morgner
2e029de07d added CLI flags do disable various checks 2013-02-09 23:44:00 +01:00
Frank Morgner
19f1db1b30 only warn about missing certificate description 2013-02-09 23:43:56 +01:00
Frank Morgner
7a85d916be fixed asn1 2013-02-09 23:43:52 +01:00
Frank Morgner
8b0b502a1e Added ASN.1 helper for auxiliary data 2013-02-09 23:43:35 +01:00
Frank Morgner
83b69396c9 fixed some compiler warnings 2013-02-09 23:43:30 +01:00
Frank Morgner
9340c66b75 check for NULL pointer 2013-02-09 23:43:12 +01:00
Frank Morgner
4fd23d08fb fixed recursive write of EFs 2013-02-04 23:31:02 +01:00
Frank Morgner
a6a10d0b3e fixed special functions 2013-02-04 23:08:00 +01:00
Frank Morgner
d98f4e57c9 added verification of age/validity/community 2013-02-03 22:27:02 +01:00
Frank Morgner
9f6ffc2fad handling special Le's for encryption in iso SM driver 2013-02-01 01:18:36 +01:00
Frank Morgner
fae2b5441f fixed referencing EAC_CTX in TA and CA 2013-01-31 22:26:56 +01:00
Frank Morgner
e01eae9ce3 added read and write of data groups
adds read_binary_rec and write_binary_rec to scutil.h
2013-01-29 15:51:35 +01:00
Frank Morgner
e9e5c7668b use OpenSC's hooks to wrap and unwrap SM APDUs
sm_transmit_apdu is obsolete. libnpa and OpenSC can be used in parallel
now. libnpa modifies OpenSC's card handle to add SM on the fly to any
OpenSC command. This, for example, allows PKCS#XX commands in a SM
channel established by libnpa.
2012-12-09 23:15:51 +01:00
Frank Morgner
de1378f780 always declare extended length capabilities
allows usage of an unpatched version of OpenPACE. libnpa now works with
the nPA using the default card driver.
2012-11-21 19:45:59 +01:00
Frank Morgner
77a52cc8e9 adapted to changes of OpenSC master
Now works with the stupid changes of OpenSC made in
41861e42b01539856b31f758dfde9ba53749eaaa
2012-11-21 19:45:59 +01:00
Frank Morgner
c6f61aa3eb adapted to changes of OpenPACE
Now works with OpenPACE 5182c69ee9dfe4ad7787d4f513d467d81a1f27ed
2012-11-21 19:45:55 +01:00
Frank Morgner
f5a2cde7d6 adapted to latest changes of openpace
works with openpace 702cf84aaa01ef5dc490d32208067a89a33102c1
2012-11-01 08:02:01 +01:00
Frank Morgner
a08ce27552 added calculation of longest encrypted short-length APDU 2012-10-10 22:02:59 +02:00
Frank Morgner
df00bca2f0 adapted to changes of openpace in 91d6ee1ec80f6... 2012-10-10 22:02:59 +02:00
Frank Morgner
1edbc97845 fixed memory leaks 2012-10-10 22:02:59 +02:00
Frank Morgner
e99979fab1 debug the result from CA's general authenticate 2012-10-10 22:02:59 +02:00
Frank Morgner
80091a6997 fixed Le for get challenge 2012-10-10 22:02:59 +02:00
Frank Morgner
af9b2bf07d nPA: using case 3 apdu for verify 2012-10-10 22:02:59 +02:00
Frank Morgner
6a36a8f733 fixed CLA of PACE's last general authenticate 2012-10-10 22:02:59 +02:00
Frank Morgner
4f6945917e nPA: added option to disable validity period check 2012-10-10 22:02:59 +02:00
Frank Morgner
765d284bc4 Fixes for MSE:Set AT in TA and CA
- TA: fixed p1, p2 and include ephemeral pubkey and OID
- CA: include OID and leave out key reference

Currently it is hard to distinguish between the CA key and the
chip-individual key using the key references in
EF.CardSecurity/EF.CardAccess. The first (default) key in these files
should, however, be the CA key.
2012-10-10 22:01:36 +02:00
Frank Morgner
5e4f7024e8 sc_format_apdu instead of manual initialisation 2012-10-10 21:58:32 +02:00
Frank Morgner
ad879e3da2 Send auxiliary data in MSE:Set AT for TA 2012-10-10 21:58:32 +02:00
Frank Morgner
080e7c6535 npa-tool: CLI to TA and CA 2012-10-10 21:58:32 +02:00
Frank Morgner
85e1c317b6 libnpa: Implementation of CA 2012-10-10 21:58:29 +02:00
Frank Morgner
7145984d5f libnpa: Implementation of TA 2012-10-10 21:46:30 +02:00
Frank Morgner
66ffb3675d added switch to disable apdu checking for TA/CA 2012-09-18 22:45:39 +02:00
Frank Morgner
00f262ad68 fetch CAR for TA from MSE:Set AT 2012-09-18 22:45:36 +02:00
Frank Morgner
70a108dfe3 adapted to changes of OpenPACE 2012-09-18 00:28:33 +02:00
frankmorgner
5cb82ab12a using selection by short identifier when reading ef.cardaccess. Fixes #3532221
git-svn-id: https://vsmartcard.svn.sourceforge.net/svnroot/vsmartcard@783 96b47cad-a561-4643-ad3b-153ac7d7599c
2012-06-22 10:08:31 +00:00
frankmorgner
78fd66c8b5 fixed clang --analyze warnings
git-svn-id: https://vsmartcard.svn.sourceforge.net/svnroot/vsmartcard@780 96b47cad-a561-4643-ad3b-153ac7d7599c
2012-04-24 12:10:44 +00:00