OpenSC driver does not work

[GoogleCodeExporter]

I have tried to use Spanish Electronic ID (it uses OpenSC drivers) but it fails 
with Andiparos

What steps will reproduce the problem?
1. Start AndiParos
2. Tools -> Options -> Certificate -> PKCS11
3. Browse C:\Windows\system32\opensc-pkcs11.dll and opensc.dll (I tried both) 
4. Name OpenSC
5. Slot [0|1|2] -> I have tested everyone
6. Select new PKCS11 entry, set PIN and Accept
7. Next pop-up appears: "Error Accessing Key Store. Maybe your password or 
driver is wrong"

The ID Reader led does not even blink before error appears.

I am using Andiparos 1.0 on Windows XP. I even have tried with 
/usr/lib/opensc.so on Mac OS X 10.6 and same error appears.

It should be great to audit webpages where Spanish Electronic ID is required.

Thanks,

Original issue reported on code.google.com by Lawwait@gmail.com on 29 Jun 2010 at 7:17

[GoogleCodeExporter]

Hi,

Smartcard slots are not limited to slot 0 - 2.

Have you also tried slots >= 2?


Regards,
Axel

Original comment by a.c.neumann on 29 Jun 2010 at 8:25

[GoogleCodeExporter]

Ok I will give it a try, but, could you tell me exactly what slot means? and 
which is the max number that could be set?

Regards,

Original comment by Lawwait@gmail.com on 29 Jun 2010 at 8:38

[GoogleCodeExporter]

In slot 3 and slot 4, led blinks and fails! at least we are moving ahead. Is 
there anyway to debug it by my own?

Original comment by Lawwait@gmail.com on 29 Jun 2010 at 9:44

[GoogleCodeExporter]

A slot is some space on the smartcard where a single certificate is stored. And 
to be honest, I do not know how many slots are available on a smartcard. There 
are many different statements about this.

As i neither have an application that supports opensc nor specific hardware, i 
am not able to help you debugging and fixing this issue, yet. Sorry!

You could check-out the project from the subversion repository and try to debug 
it yourself. I am very confident that it will work.

Regards,
Axel

Original comment by a.c.neumann on 29 Jun 2010 at 3:58

• Added labels: Priority-Low
• Removed labels: Priority-Medium

[GoogleCodeExporter]

Ok I will go deep on it and let you know... 

Regards,

Original comment by Lawwait@gmail.com on 29 Jun 2010 at 10:24

[GoogleCodeExporter]

Did you try to run Andiparos on a 64bit Windows system? Just found out that 
Java's PKCS11 support is not available on 64bit Windows atm... Maybe that's the 
problem

Original comment by a.c.neumann on 27 Jul 2010 at 4:37

[GoogleCodeExporter]

We had a serious bug in Andiparos preventing from using different smartcard 
slots... Hope this solves your problems with the OpenSC driver.

Could you please report back if it worked?

Original comment by a.c.neumann on 29 Jul 2010 at 9:45

[GoogleCodeExporter]

Hello, I have been testing again and I don't find the way to make it work. I 
have been tsting with driver C:\windows\ssytem32\opensc-pkcs11.dll (that seems 
to be the one to be used with Spanish ID Card) but no luck. I have tested from 
slots 0 to 3 with same answer: Password or driver wrong. Anyway it looks once 
you fail the first time, an Java exception occurs and whatever you set will 
fail, so you have to close the program and reopen it again to select a 
different slot. Just the first time the reader led will start to blink while 
fetching the certificate... any way to have a debug version to help you? maybe 
you could send me a version where debug messages were enabled in PKCS11 
section...

Regads, 

Original comment by Lawwait@gmail.com on 23 Aug 2010 at 4:53

[GoogleCodeExporter]

Hi,

Thanks for testing again! Mhhh, i expected OpenSC to work now, as tests with 
other SC drivers all went very well.

Maybe it's the wrong driver file. On windows, i use the tool "Dependency 
Walker" to identify the methods that are supported by the DLL. I will take a 
look into the provided DLL's of OpenSC and give you some feedback.

There is no debugging version of Andiparos. What you could do is to import the 
project into Eclipse. Setup a new Debug Configuration. Use 
"org.parosproxy.paros.Andiparos" as the main class and 
"${workspace_loc:Andiparos/output}" as the working directory. Then you should 
be able to debug Andiparos.

Thanks again for your support.

Regards,
Axel

Original comment by a.c.neumann on 27 Aug 2010 at 8:49