[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Smart Card access (via Keychain) from Java

Subject: Re: Smart Card access (via Keychain) from Java
From: Bruno Harbulot <email@hidden>
Date: Wed, 26 Mar 2008 14:13:24 +0000
Delivered-to: email@hidden
Delivered-to: email@hidden
User-agent: Thunderbird 2.0.0.12 (Macintosh/20080213)

Hi,

Matteo Centro wrote:

Hi all,
I need to write a Java Applet that digitally signs a file using certificate and key that reside on a Smart Card. I could use some PKCS#11 wrapper but the main problem is that I don't have a PKCS#11 library, only a tokend. The card is "seen" on Keychain Access app as a new keychain and the certificates on the card are listed when I iterate through the KeyStore using (KeyStore.getInstance("KeychainStore", "Apple")).aliases(); no Private Keys are listed though, so I assume it will be pretty hard to try to sign using certificates on the smartcard. Has anybody encountered the same problem? What is the recommended way to solve this?

I get the same problem. The KeychainStore is buggy anyway and not really useful for anything else than at most one private key in a file-based keychain: http://lists.apple.com/archives/java-dev//2007/Aug/msg00132.html

It looks like we're not the only ones to have this problem:
  http://lists.apple.com/archives/java-dev/2007/Nov/msg00476.html

(In my case, it also lists some certificates that are not currently in any of my keychains according to Keychain Access.app...)

The Sun PKCS#11 provider seems to work better. What's described on the Sun page seems to work fine for me, but this is probably because I'm using the OpenSC PKCS#11 library, which you might not be able to: http://java.sun.com/j2se/1.5.0/docs/guide/security/p11guide.html#Config


Best wishes,

Bruno.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Apple-cdsa mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/apple-cdsa/email@hidden

This email sent to email@hidden

References:
	>Smart Card access (via Keychain) from Java (From: Matteo Centro <email@hidden>)

Prev by Date: Re: Problems with certain cards with PC/SC and GemPC Twin USB
Next by Date: sc_auth with an eToken
Previous by thread: Smart Card access (via Keychain) from Java
Next by thread: sc_auth with an eToken
Index(es):
- Date
- Thread

Home