Re: Problems accessing ActivIdentity USB SIM under Gentoo Linux 64 bit on Intel

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]


On 01/21/2011 03:51 PM, Lyall Pearce wrote:
Find attached the pcscd and pkcs11_inspect output for a successful run of the exact same ActivIdentity USB SIM on my 32 bit Gentoo Intel system, plugged into a USB Hub, not directly into the machine. I used the hub simply because it's on my desk and the machine is under the desk.

The 64 bit system is a laptop, at work, and plugging directly into the machine is more convenient.

It works.

This is why I am confused about my 64 bit system.

Thanks to all that are helping, by the way, I appreciate it.


1. Please answer my question about your token. Is it a one cert CAC card? If you don't know at least tell me...

2. Thanks for the logs, but the one I really wanted was the coolkey log (using the instructions Jack sent).

3. I'd like to make sure I understand you correctly:

32-bit with USB hub works.
64-bit without USB hub does not work.

I've found the Hubs can be notoriously flaky, so if the failure case was with the hub, then I would say we should probably check swapping things around. It still may be worthwhile doing that, but I'm guessing not.

I'm still at a loss why 32-bit works and 64-bit doesn't. My theory is still a problem with only a single cert (though why 32-bit works is a mystery, so the theory is tentative).

There isn't a native 64-bit problem, since I normally test 64-bit rather than 32-bit myself.



On Sat, Jan 22, 2011 at 5:17 AM, Robert Relyea <rrelyea@xxxxxxxxxx> wrote:
On 01/20/2011 06:56 PM, dsm42@xxxxxxxxx wrote:

I've never seen Coolkey work with PIV, but all the cards I've used are hybrid CAC/PIV, so Coolkey uses the CAC applet. OpenSC handles PIV just fine and works with the same cards.

- David
Many of the new Cac's don't have the old CAC interface, only the PIV interface. Coolkey was recently modified to work with these cards, but it has never been tested against pure PIV cards. The ActiveIdenity card looks like it's a CAC, however.


Coolkey-devel mailing list


_______________________________________________ Coolkey-devel mailing list Coolkey-devel@xxxxxxxxxx

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Coolkey-devel mailing list

[Index of Archives]     [Fedora Desktop]     [Fedora SELinux]     [Big List of Linux Books]     [Yosemite News]     [KDE Users]     [Fedora Women]

  Powered by Linux