Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ePass FIDO-NFC - cannot delete key #2085

Closed
KRunchPL opened this issue Jul 29, 2020 · 5 comments
Closed

ePass FIDO-NFC - cannot delete key #2085

KRunchPL opened this issue Jul 29, 2020 · 5 comments
Assignees

Comments

@KRunchPL
Copy link

It seems that after deletion of a private key, the key file is deleted, but it's "metadata" is still there, when trying to read it's public key error Public key enumeration failed: Reference data not usable is shown.

Steps to reproduce

  1. Insert key (with CCID enabled and initialized according to https://www.rcdevs.com/docs/howtos/epass/epass/)
  2. Run pkcs15-init --verify-pin --auth-id 80 --generate-key rsa/2048 --key-usage sign,decrypt --label "TESTKEY"
  3. Run pkcs15-tool.exe --list-key to get ID of created key
  4. Run pkcs15-init.exe -D privkey --verify-pin --auth-id 80 --id 1 (with ID get in prev step)
  5. Run pkcs15-tool.exe --list-key

Expected behavior

Key TESTKEY is not on the list

Actual behavior

Key TESTKEY is still on the list. It's pub key cannot be read anymore with pkcs15-tool.exe --read-public-key 00.

Logs

Logs

@frankmorgner
Copy link
Member

@FeitianSmartcardReader ?

@FeitianSmartcardReader
Copy link
Contributor

FeitianSmartcardReader commented Jul 30, 2020

@KRunchPL I forward your message to world.support@ftsafe.com, he is right person for our FIDO product, he will send you mail later today, any questions, send mail to him.

@frankmorgner looks the token doesn't load GIDS applet, so it cannot be use with OpenSC, our engineer will keep in touch with Jacek Chałupka and give a solution, thanks for your reminder.

@frankmorgner
Copy link
Member

any update?

@FeitianSmartcardReader
Copy link
Contributor

Thanks Frank

Engineer will starting working on this in the next few days, will keep update, thanks

@superskybird
Copy link

ePass FIDO-NFC has optional feature of GIDs, but this feature was not proposed. Now ePass FIDO-NFC has removed this feature and adding FIDO2 feature . So please ignore GIDs now.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants