RE: PKCS#11

Hi Bob,

I noticed something more about the "CreateObject" problem mentioned in my 
previous email. The call to CSM_Pkcs11::SetPin creates a public object on 
the card containing the card PIN code. Since the object is public, it means 
that at the end the card carries a PIN readable by everybody.

Moreover, I do not understand the need for the call to CSM_Pkcs11::SetPin, 
since I have the impression that m_hPinObject (the handle to the Pin Object 
on the card) is never used in the code.

Thanks again for help,

Marco


>From: "Colestock, Robert" <[email protected]>
>To: 'Marco Scarsi' <[email protected]>, "Colestock, Robert"  
><[email protected]>
>CC: "'[email protected]'" <[email protected]>
>Subject: RE: PKCS#11
>Date: Thu, 17 May 2001 15:40:55 -0400
>MIME-Version: 1.0
>Received: from [206.137.100.2] by hotmail.com (3.2) with ESMTP id 
>MHotMailBCCD7378008640043252CE89640280300; Thu May 17 12:37:32 2001
>Received: by wfhqex05.gfgsi.com with Internet Mail Service (5.5.2653.19)id 
><KZJ94QRH>; Thu, 17 May 2001 15:40:56 -0400
>From [email protected] Thu May 17 12:39:24 2001
>Message-ID: <[email protected]>
>X-Mailer: Internet Mail Service (5.5.2653.19)
>
>Marco:
>
>Glad to hear it.  The certificate file extensions you mention are all 
>binary
>ASN.1 encoded formats I believe; they should be fine.  The extension does
>not matter to the SFL, but it must be a binary ASN.1 encoded format.
>
>If you are using our test utilities for your verification, we report 
>success
>even if the signatures fail; you have to check the output reports very
>carefully to see the message like "SignerInfo number 1 WAS VERIFIED" before
>the test can be considered a success.  If you are using the SFL API 
>classes,
>then you must check the individual SignerInfo classes for the verified flag
>(demonstrated in the client level class, CL_MsgToVerify::Report()).  You
>could also simply breakpoint in your CTIL/lib to check results.
>
>Please be careful to check results; the "sm_pkcs11Free3DLLd" project is
>quite new, and relatively untested (powerful).  Please let me know if you
>have any updates to this specific project/sources to support your project.
>
>Bob Colestock
>VDA.

_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.