Re: [Fed-Talk] Smart Cards (CAC) and PKCS#11 library support forthird party OS X Applications...
Re: [Fed-Talk] Smart Cards (CAC) and PKCS#11 library support forthird party OS X Applications...
- Subject: Re: [Fed-Talk] Smart Cards (CAC) and PKCS#11 library support forthird party OS X Applications...
- From: Boyd Fletcher <email@hidden>
- Date: Wed, 8 Oct 2008 21:01:56 -0400
- Thread-topic: [Fed-Talk] Smart Cards (CAC) and PKCS#11 library support forthird party OS X Applications...
Title: Re: [Fed-Talk] Smart Cards (CAC) and PKCS#11 library support forthird party OS X Applications...
but you forgot that you are in hawaii and its willing to take a beating to stay there. next time threaten to send it to rome,ny or ohio in winter :)
did you have Firefox running at the same time? if so, you might need to reboot to get access to CAC. I’ve found that sometimes coolkey grabs the CAC and doesn’t release it to other apps even after exiting FF. No amount of unplugs of the reader brings it back to lfe. So I end up rebooting to fix it.
On 10/8/08 7:47 PM, "Mark Radleigh" <email@hidden> wrote:
I downloaded Adobe Reader 9 and tried it out with the latest pre-built
CoolKey kit with no success. While Acrobat 9 (as with 8) did recognize the
library, I could not get it to see my CAC (even after importing *all* the
DoD CAs and setting their trust levels). Apparently, you were able to
successfully threaten your Mac into submission (I guess the hammer I had
sitting on my desk next to my Mac didn't work).
V/R,
--
Mark Radleigh, Contractor, AFRL/RDSM
Maui High Performance Computing Center
email@hidden
Caution: This message may contain competitive, sensitive or other
non-public information not intended for disclosure outside official
government channels. Do not disseminate this message without the approval
of the undersigned's office. If you received this message in error, please
notify the sender by reply e-mail and delete all copies of this message.
> From: "Mueller, David S CIV SSC San Diego, 2872" <email@hidden>
> Date: Wed, 8 Oct 2008 08:07:38 -0700
> To: "Timothy J. Miller" <email@hidden>, Mark Radleigh
> <email@hidden>
> Cc: Apple FED-TALK <email@hidden>
> Subject: RE: [Fed-Talk] Smart Cards (CAC) and PKCS#11 library support forthird
> party OS X Applications...
>
> With respect to Adobe Reader, I had not been able to get Coolkey to work
> on Mac OS X with Adobe Reader 8.x. It was able to get it to work with
> Adobe Reader 9.0.0. The module library path that I use is:
>
> /usr/local/lib/pkcs11/libcoolkeypk11.dylib
>
> - David
>
> -----Original Message-----
> From: Timothy J. Miller
> Sent: Wednesday, October 08, 2008 7:10 AM
> To: Mark Radleigh
> Cc: Apple FED-TALK
> Subject: Re: [Fed-Talk] Smart Cards (CAC) and PKCS#11 library support
> forthird party OS X Applications...
>
>
> Mark Radleigh wrote:
>
>> Anyways, I feel the need for a (working) PKCS#11 library to support
>> third party applications that do not utilize the native OS X 'Tokend'
>> security infrastructure has grown to a near-critical point.
>
> Technically, *all* PKCS#11 modules bypass CDSA (which securityd and
> tokend are components of), and plug the application directly into PC/SC.
>
> PC/SC uses IFD handlers to manage card edges--there's one for CAC and
> one for PIV among others on OS X.
>
>> I have installed CoolKey (both self-compiled and pre-built binaries)
>> without any success
>
> Unfortunately I've not managed to convince Adobe Reader to load the
> Coolkey PKCS#11 module. This seems to be because Adobe expects the
> bundle structure, not the raw module. I've not had motivation yet to
> try to package libcoolkeypk11 up and see what happens.
>
> Works reliably for me in Firefox and Thunderbird, so I'm wondering what
> the problem is (aside from Adobe, above) at your end.
>
>> So, can anyone help with this issue or enlighten me to any future
>> plans? Any help is appreciated. Maybe I just need a vacation and
>> everything will work magically when I get back. One can always
>> hope... :)
>
> I find it helpful to whisper threats into the computer microphone. The
> system must properly fear you.
>
> -- Tim
>
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden