Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

how to disable secure messaging for epass2003? #2856

Closed
sachindia86 opened this issue Sep 2, 2023 · 3 comments
Closed

how to disable secure messaging for epass2003? #2856

sachindia86 opened this issue Sep 2, 2023 · 3 comments

Comments

@sachindia86
Copy link

sachindia86 commented Sep 2, 2023

Problem Description

I want to disable secure messaging for epass2003 token.
I have tried to undef macro ENABLE_SM & ENABLE_OPENSSL in configure.ac but epass2003 driver is getting disabled from compilation altogether.

This is the bug in the epass2003 driver.

Steps to reproduce

Just disable the secure messagaing from configure.ac and build.

Logs

@popovec
Copy link
Member

popovec commented Sep 2, 2023

If epass2003 announces support for SM (see APDU get capabilities 00 CA 01 86, look for TAG 0x84 in the response), it is necessary to use it, otherwise mutual auth will not take place and the token will reject any operation.

@dengert
Copy link
Member

dengert commented Sep 2, 2023

Why are you trying to turn off Secure Messaging?

If its for debugging, you could uses a debugger. Look at epass2003_sm_wrap_apdu the input apdu is plain . And look at epass2003_sm_unwrap_apdu where it returns plain. You could also add some calls to sc_dump_hex. grep for sc_debug(ctx, SC_LOG_DEBUG_SM in the code to see how to do this.

@sachindia86
Copy link
Author

Thanks @popovec @dengert for the guidance. I will try.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants