Mailing Lists: Apple Mailing Lists
Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: PKCS#11 Question


On Nov 20, 2007, at 4:40 PM, Jay Kline wrote:

Im writing a java application that does authentication via Smart Cards
(PKCS#11) and need to get it functional on OSX.  Using the SunPKCS11
provider with the library out in /usr/libexec/SmartCardServices/pkcs11
it "half works".  That is, it dosnt error, and can give some information
about the card and/or reader, but it seems to provide an empty KeyStore.

Ive found I can use keytool to test both cases easily:

keytool -keystore NONE -storetype PKCS11 -providerClass
sun.security.pkcs11.SunPKCS11 -providerArg pkcs11.config -list

The above lists PrivateKeyEntry's on Linux, and has 0 entries on Mac.
Am I going about this wrong?

You are likely to have more success with the Sun-provided PKCS11 implementation, since the pkcs11 bundle in /usr/libexec/SmartCardServices implements all of the necessary functions required to use the SunPKCS11 provider. The KeychainStore implementation relies on Apple's CDSA implementation to access information, but we do not have a fully implemented JCE/JCA provider that uses CDSA for all of the cryptographic operations needed to access keys on a smart card.

Can you see the smartcard in Keychain Access.app? If you unlock the card with that application first you might have better luck.

You might want to check out the apple-cdsa mailing list, too.

Scott

------------------
Scott Kovatch
Apple Inc.
Java Runtime Classes
email@hidden

I am Scott Kovatch, and I approved this message.
 

 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Java-dev mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/java-dev/email@hidden

This email sent to email@hidden
References: 
 >PKCS#11 Question (From: Jay Kline <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.