OpenSC onepin

Jakub Jelen <[email protected]>
Newsgroups gmane.comp.encryption.opensc.devel
Message-ID <[email protected]>
Hello all,

recently we discussed the usefulness of the onepin library and basically 
came to conclusion that the onepin should be used by default. Most of 
the cards have only one pin (if there is the second, it is most probably 
not needed to be visible in the PKCS#11, since should be "signature 
pin") and also the PKCS#11 specification is moving away from the mapping 
of multiple pins to multiple PKCS#11 tokens (citation needed?).

The intention of this email is to start a discussion, if we still want 
to have virtual slots by default. Mozilla is not going to expose the 
"friendly bit" in UI [1], which would be possible workaround. But AFAIK, 
we could make that default and for the other use cases create some 
virtual-slots-opensc-pkcs11.so which would behave like the current default.

[1] https://bugzilla.mozilla.org/show_bug.cgi?id=322145

Regards,

-- 
Jakub Jelen
Security Technologies
Red Hat


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most 
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.