1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
|
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:html="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<title>RecentTestresults - OpenSC - Trac</title><style type="text/css">
@import url(trac.css);
</style></head><body><div class="wikipage">
<div id="searchable"><h1>Recent test results for various smart cards</h1>
<p>
Providing test results is a bit difficult, since a test includes
</p>
<ul><li>OpenSC (Version)
</li><li>Smart card (Name, Variant, blank or pre-initialized)
</li><li>Operating Sytem (Name, Version, Architecture)
</li><li>Smart card reader (Name, Modell, Firmware version)
</li><li>Software for the smart card reader driver (Name of the driver, version)
</li><li>Middleware (PC/SC-Lite? Version? Configuration?)
</li><li>opensc.conf configuration
</li></ul><p>
And of course the features that were tested. Here is a list:
</p>
<ul><li>src/test/regression test suite, run-all script.
</li><li>pkcs15-init (manual init, keygen, certificate store, cert+key store)
</li><li>pkcs11-tool (manual, "pkcs11-tool --test --login")
</li><li>openssl command line tool with opensc engine
</li><li>openssl command line tool with pkcs11 engine
</li><li>firefox with pkcs11 module (https authentication with a client certificate and key)
</li><li>thunderbird with pkcs11 module (email signing and decryption)
</li><li>mozilla with the same tests as firefox and thunderbird
</li><li>netscape with the same tests as firefox and thunderbird
</li><li>key generation and certificate store via some web site (e.g. thawte community)
</li><li>openssh with smart card authentication (or putty on windows)
</li><li>openssh agent with smart card authentication (or pageant on windows)
</li><li>login with pam module (with local .eid/authorized_certificates)
</li><li>login with pam module (with the certificate in an ldap server)
</li><li>free/open/stronswan vpn with x.509 certificate authentication using a smart card
</li><li>accessing a wireless lan protected with wpa, 802.1x, eap-tls using the wpa_supplicant, with a smart card
</li><li>testing the Identity Alliance CSP on windows with the opensc-pkcs11.dll: using internet explorer for client certificate authentication at some website.
</li><li>testing the Identity Alliance CSP on windows with the opensc-pkcs11.dll: using outlook to sign and decrypt emails.
</li><li>testing CSP <a href="/opensc/ticket/11" title="CLOSED : gcc4 build failure" shape="rect"><del>#11</del></a> on windows with the opensc-pkcs11.dll: using internet explorer for client certificate authentication at some website
</li><li>testing CSP <a href="/opensc/ticket/11" title="CLOSED : gcc4 build failure" shape="rect"><del>#11</del></a> on windows with the opensc-pkcs11.dll: using outlook to sign an decrypt emails.
</li></ul><p>
We can't test all combinations of OpenSC, card, Reader, driver software with all features.
</p>
<p>
So the basic regression tests (or pkcs11-tool for pre-initialized cards) is done with as many cards
as possible on at least one plattform. Once we know the cards work with OpenSC on this plattform, the next test is
to test as many features as possible on many plattforms, but it is ok to test only with a few or only once card.
</p>
<p>
Which cards passed the src/test/regression/run-all test suite?
</p>
<div class="document">
<table border="1" class="docutils">
<colgroup span="1">
<col width="19%" span="1"></col>
<col width="6%" span="1"></col>
<col width="11%" span="1"></col>
<col width="19%" span="1"></col>
<col width="15%" span="1"></col>
<col width="8%" span="1"></col>
<col width="22%" span="1"></col>
</colgroup>
<tbody valign="top">
<tr><td rowspan="1" colspan="1">Card Name</td>
<td rowspan="1" colspan="1">OpenSC</td>
<td rowspan="1" colspan="1">Date</td>
<td rowspan="1" colspan="1">Reader</td>
<td rowspan="1" colspan="1">Reader driver</td>
<td rowspan="1" colspan="1">Result</td>
<td rowspan="1" colspan="1">Tester</td>
</tr>
<tr><td rowspan="1" colspan="1">Aladdin eToken PRO</td>
<td rowspan="1" colspan="1">0.9.5</td>
<td rowspan="1" colspan="1">2005-01-13</td>
<td rowspan="1" colspan="1">Aladdin eToken PRO</td>
<td rowspan="1" colspan="1">OpenCT 0.6.3</td>
<td rowspan="1" colspan="1">All ok.</td>
<td rowspan="1" colspan="1">Andreas Jellinghaus</td>
</tr>
<tr><td rowspan="1" colspan="1">Cryptoflex 32k</td>
<td rowspan="1" colspan="1">0.9.5</td>
<td rowspan="1" colspan="1">2005-01-13</td>
<td rowspan="1" colspan="1">eGate Token</td>
<td rowspan="1" colspan="1">OpenCT 0.6.3</td>
<td rowspan="1" colspan="1">All ok.</td>
<td rowspan="1" colspan="1">Andreas Jellinghaus</td>
</tr>
<tr><td rowspan="1" colspan="1">Rainbow iKey 3000</td>
<td rowspan="1" colspan="1">0.9.5</td>
<td rowspan="1" colspan="1">2005-01-13</td>
<td rowspan="1" colspan="1">Rainbow iKey 3000</td>
<td rowspan="1" colspan="1">OpenCT 0.6.3</td>
<td rowspan="1" colspan="1">All ok.</td>
<td rowspan="1" colspan="1">Andreas Jellinghaus</td>
</tr>
</tbody>
</table>
</div><p>
Note that Rainbow iKey 3000 has a Starcos SPK 2.3 operating system, and thus the pin0002 test will
fail, but this is ok as the Starcos SPK 2.3 implementation of the ISO 7816 RESET RETRY COUNTER command
is not ISO compliant.
</p>
<p>
Which cards passed the "pkcs11-tool --test --login" test? (Only for pre-initialized cards)
</p>
<div class="document">
<table border="1" class="docutils">
<colgroup span="1">
<col width="19%" span="1"></col>
<col width="6%" span="1"></col>
<col width="11%" span="1"></col>
<col width="19%" span="1"></col>
<col width="16%" span="1"></col>
<col width="7%" span="1"></col>
<col width="21%" span="1"></col>
</colgroup>
<tbody valign="top">
<tr><td rowspan="1" colspan="1">Card Name</td>
<td rowspan="1" colspan="1">OpenSC</td>
<td rowspan="1" colspan="1">Date</td>
<td rowspan="1" colspan="1">Reader</td>
<td rowspan="1" colspan="1">Reader driver</td>
<td rowspan="1" colspan="1">Result</td>
<td rowspan="1" colspan="1">Tester</td>
</tr>
<tr><td rowspan="1" colspan="1">Signtrust TCOS</td>
<td rowspan="1" colspan="1">0.9.5</td>
<td rowspan="1" colspan="1">2005-03-04</td>
<td rowspan="1" colspan="1">Towitoko Serial</td>
<td rowspan="1" colspan="1">OpenCT 0.6.3</td>
<td rowspan="1" colspan="1">???</td>
<td rowspan="1" colspan="1">Andreas Jellinghaus</td>
</tr>
<tr><td rowspan="1" colspan="1">Signtrust TCOS</td>
<td rowspan="1" colspan="1">0.10.0</td>
<td rowspan="1" colspan="1">2005-11-01</td>
<td rowspan="1" colspan="1">Kobil Kaan</td>
<td rowspan="1" colspan="1">PCSC-lite 1.2.0</td>
<td rowspan="1" colspan="1">OK 1)</td>
<td rowspan="1" colspan="1">Peter Koch</td>
</tr>
<tr><td rowspan="1" colspan="1">TeleSec TCOS</td>
<td rowspan="1" colspan="1">0.10.0</td>
<td rowspan="1" colspan="1">2005-11-01</td>
<td rowspan="1" colspan="1">Kobil Kaan</td>
<td rowspan="1" colspan="1">PCSC-lite 1.2.0</td>
<td rowspan="1" colspan="1">OK 1)</td>
<td rowspan="1" colspan="1">Peter Koch</td>
</tr>
</tbody>
</table>
</div><p>
1) TCOS supports raw RSA padding and therefor pkcs11-tool tries raw RSA padding with ALL keys.
But TCOS supports RSA padding for decryption keys ONLY, so pkcs11-tool fails when it tests
raw RSA padding with the signature key. This is a minor problem as regular application will
NOT do signature operations with raw RSA padding but use PKCS1 padding instead. The latter
works fine with both signature and decryption keys.
</p>
<p>
Which operating system works fine with OpenSC? Add one line for every feature that works or not.
</p>
<div class="document">
<table border="1" class="docutils">
<colgroup span="1">
<col width="18%" span="1"></col>
<col width="12%" span="1"></col>
<col width="18%" span="1"></col>
<col width="13%" span="1"></col>
<col width="11%" span="1"></col>
<col width="10%" span="1"></col>
<col width="18%" span="1"></col>
</colgroup>
<tbody valign="top">
<tr><td rowspan="1" colspan="1">Operating System</td>
<td rowspan="1" colspan="1">Version</td>
<td rowspan="1" colspan="1">Architecture</td>
<td rowspan="1" colspan="1">OpenSC</td>
<td rowspan="1" colspan="1">Feature</td>
<td rowspan="1" colspan="1">Result</td>
<td rowspan="1" colspan="1">Tester</td>
</tr>
<tr><td rowspan="1" colspan="1">Windows XP</td>
<td rowspan="1" colspan="1">PRO SP2</td>
<td rowspan="1" colspan="1">i386</td>
<td rowspan="1" colspan="1">0.9.5+winfixes</td>
<td rowspan="1" colspan="1">pkcs15-init</td>
<td rowspan="1" colspan="1">All ok.</td>
<td rowspan="1" colspan="1">Andreas Jellinghaus</td>
</tr>
<tr><td rowspan="1" colspan="1">Windows XP</td>
<td rowspan="1" colspan="1">PRO SP2</td>
<td rowspan="1" colspan="1">i386</td>
<td rowspan="1" colspan="1">0.9.5+winfixes</td>
<td rowspan="1" colspan="1">pkcs11-tool</td>
<td rowspan="1" colspan="1">All ok.</td>
<td rowspan="1" colspan="1">Andreas Jellinghaus</td>
</tr>
<tr><td rowspan="1" colspan="1">Windows XP</td>
<td rowspan="1" colspan="1">PRO SP2</td>
<td rowspan="1" colspan="1">i386</td>
<td rowspan="1" colspan="1">0.9.5+winfixes</td>
<td rowspan="1" colspan="1">putty</td>
<td rowspan="1" colspan="1">All ok.</td>
<td rowspan="1" colspan="1">Andreas Jellinghaus</td>
</tr>
<tr><td rowspan="1" colspan="1">Windows XP</td>
<td rowspan="1" colspan="1">PRO SP2</td>
<td rowspan="1" colspan="1">i386</td>
<td rowspan="1" colspan="1">0.9.5+winfixes</td>
<td rowspan="1" colspan="1">firefox</td>
<td rowspan="1" colspan="1">Crashes.</td>
<td rowspan="1" colspan="1">Andreas Jellinghaus</td>
</tr>
<tr><td rowspan="1" colspan="1">Debian GNU/Linux</td>
<td rowspan="1" colspan="1">Sarge</td>
<td rowspan="1" colspan="1">i386</td>
<td rowspan="1" colspan="1">0.9.5</td>
<td rowspan="1" colspan="1">pkcs15-init</td>
<td rowspan="1" colspan="1">All ok.</td>
<td rowspan="1" colspan="1">Andreas Jellinghaus</td>
</tr>
<tr><td rowspan="1" colspan="1">Debian GNU/Linux</td>
<td rowspan="1" colspan="1">Sarge</td>
<td rowspan="1" colspan="1">i386</td>
<td rowspan="1" colspan="1">0.9.5</td>
<td rowspan="1" colspan="1">pkcs15-init</td>
<td rowspan="1" colspan="1">All ok.</td>
<td rowspan="1" colspan="1">Andreas Jellinghaus</td>
</tr>
<tr><td rowspan="1" colspan="1">Debian GNU/Linux</td>
<td rowspan="1" colspan="1">Sarge</td>
<td rowspan="1" colspan="1">i386</td>
<td rowspan="1" colspan="1">0.9.5</td>
<td rowspan="1" colspan="1">pkcs15-init</td>
<td rowspan="1" colspan="1">All ok.</td>
<td rowspan="1" colspan="1">Andreas Jellinghaus</td>
</tr>
<tr><td rowspan="1" colspan="1">Debian GNU/Linux</td>
<td rowspan="1" colspan="1">Sarge</td>
<td rowspan="1" colspan="1">i386</td>
<td rowspan="1" colspan="1">0.9.5</td>
<td rowspan="1" colspan="1">pkcs15-init</td>
<td rowspan="1" colspan="1">All ok.</td>
<td rowspan="1" colspan="1">Andreas Jellinghaus</td>
</tr>
</tbody>
</table>
</div><p>
After you have tested some hardware, please let us know by adding a line.
If something does not work as expected, please also open a new ticket
with a detailed bug report.
</p>
<p>
Note: adding your name as tester is optional. I think it might be nice so one can ask more details if necessary.
</p>
</div>
</div><div class="footer"><hr></hr><p><a href="index.html">Back to Index</a></p></div></body></html>
|
