read cert from smart card

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, 2016-02-25 at 13:39 +0200, Mithat Bozkurt wrote:
> 
> BTW I am getting e-mail with subject is " Your message to p11-glue
> awaits moderator approval" from p11-glue.

It might be one of those horrid lists which require you to subscribe
before you post to it.

Or maybe it just hates you for top-posting. :)

> Do I remove the p11-glue from recipients or remain same?

Let's drop it. I think the interesting part for now is in p11tool
(which is part of GnuTLS and hence Nikos' problem) rather than p11-kit
itself.

Try extracting your cert with OpenSC's pkcs11-tool instead:

? pkcs11-tool -module /usr/lib/libakisp11.so -l -a 62917107586NES0 -y cert -r -o nescert.der
? openssl x509 -inform DER -in nescert.der -noout -text


When that doesn't work, install the pkcs11-spy module (which on Fedora
would be /usr/lib64/pkcs11/pkcs11-spy.so). Then:

?export PKCS11SPY=/usr/lib/libakisp11.so

and repeat the p11tool/pkcs11-tool invocations to extract the cert, but
using pkcs11-spy.so as the provider instead of (directly) using the
akis module. Show the full output of those commands.

--?
dwmw2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5691 bytes
Desc: not available
URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20160225/99a7cd6b/attachment-0001.bin>


[Index of Archives]     [Linux Samsung SoC]     [Linux Rockchip SoC]     [Linux Actions SoC]     [Linux for Synopsys ARC Processors]     [Linux NFS]     [Linux NILFS]     [Linux USB Devel]     [Video for Linux]     [Linux Audio Users]     [Yosemite News]     [Linux Kernel]     [Linux SCSI]


  Powered by Linux