Re: One bad PIN entry locks card

Martin Paljak <[email protected]>
Newsgroups gmane.comp.encryption.opensc.devel
Message-ID <CACsm3DVbuUj5t16GwVExeS0h++QGiyH4NY7=XXK7pAdqud4zpw@mail.gmail.com>
This seems like a malfunction, by no design should a software component
re-try a PIN entry, especially if it fails at some stage. A debug log would
be helpful.

On Sun, 9 Oct 2016 at 20:25 Ernie Kovak <[email protected]> wrote:

> Hello -
>
> We're using NSS (JSS4 and NSS 3.20) with an OpenSC 0.16.0 module to
> interact with a DoD CAC. CACs will lock after 3 consecutive bad PIN
> entries, of course, and we're finding that if the user enters a bad PIN
> even once, that hard limit is exceeded and the card is locked.
>
> I've substituted an ActivClient module and found that it does not lock the
> card, so it seems like OpenSC is retrying with a bad PIN??
>
> If that's true, is there a configuration item that I can set to suppress
> retries in this case?
>
> Thanks!
> Ernie
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> _______________________________________________
> Opensc-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/opensc-devel
>

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most 
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

_______________________________________________
Opensc-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/opensc-devel
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.