Re: [Fed-Talk] Using Digital Signature with CAC with Acrobat
Re: [Fed-Talk] Using Digital Signature with CAC with Acrobat
- Subject: Re: [Fed-Talk] Using Digital Signature with CAC with Acrobat
- From: charles mae <email@hidden>
- Date: Mon, 02 Jul 2007 13:44:21 -0500
- Thread-topic: [Fed-Talk] Using Digital Signature with CAC with Acrobat
Title: Re: [Fed-Talk] Using Digital Signature with CAC with Acrobat
Interestingly enough, I am working closely with Shawn on this.
Acrobat does currently support PKCS #11 with 8.1. I am getting my reader this week to demonstrate it.
But, from my discussions with Shawn, the issue is with the CAC card which is “known” to the Mac OS and the drivers have already been pre-loaded. The CAC is made to work specifically via tokend where the OS takes ownership of the card and expects all apps to go via the keychain and negate the use of the older PKCS #11 interface which needs to be loaded from each apps.
We thought that we could just provide PKCS #11 support which works with non Mac known readers where you would just load the drivers.
_______________________________________________
Charles Mae
Enterprise Systems Engineer
Adobe Systems, Inc.
972-377-6479 Office/cell
email@hidden
Yahoo: chmtoy / MSN: email@hidden / AIM: charlesmae
http://mmse.acrobat.com/instantmeeting
1-866-851-9754 passcode: 149408
_______________________________________________
From: Paul Nelson <email@hidden>
Date: Mon, 2 Jul 2007 11:38:51 -0700
To: "Timothy J. Miller" <email@hidden>, Charles Mae <email@hidden>
Cc: Apple Fed Talk <email@hidden>
Conversation: [Fed-Talk] Using Digital Signature with CAC with Acrobat
Subject: Re: [Fed-Talk] Using Digital Signature with CAC with Acrobat
Tim is right, but there are some limitations and bugs.
Other products are having problems sharing the card with the Keychain due to
the way locking of the card resource is done (or not done right). Sometimes
these apps just hang.
Adobe should post on the cdsa list for further info, or contact Shawn
Geddis.
Paul Nelson
Thursby Software Systems, Inc.
on 7/2/07 1:15 PM, Timothy J. Miller at email@hidden wrote:
> This is untrue. Both PKCS#11 and the OS X Keychain subsystem use PC/
> SC, which happily supports access to the card by both methods
> simultaneously. For example, Firefox uses PKCS#11 for smartcard
> access, and works perfectly well with the CAC alongside (and
> simultaneous with) applications accessing the CAC via tokend.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden