read cert from smart card

Mithat Bozkurt mithatbozkurt at gmail.com
Wed Feb 24 22:41:05 PST 2016


without typ= part result as below

mithat at adige:~$ openconnect -c
'pkcs11:model=AKIS%20V1.2%00%00%00%00%00%00%00;manufacturer=TUBITAK-UEKAE%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00;serial=0036218D34081A32;token=Akis%00A%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff%ff;id=%fd%90%0c%3b%c4%20%b0%b4%39%f7%1e%fa%02%ef%df%45%50%91%8f%c4;object=62917107586SIGN0'
XYZ.XYZ.XYZ.XYZ
POST https://XYZ.XYZ.XYZ.XYZ/
Attempting to connect to server XYZ.XYZ.XYZ.XYZ:443
PIN required for Akis
Enter PIN:
Error loading certificate from PKCS#11: The requested data were not available.
Loading certificate failed. Aborting.
Failed to open HTTPS connection to XYZ.XYZ.XYZ.XYZ
Failed to obtain WebVPN cookie


mithat at adige:~$ openconnect -c
'pkcs11:serial=0036218D34081A32;object=62917107586SIGN0'
XYZ.XYZ.XYZ.XYZPOST https://XYZ.XYZ.XYZ.XYZ/
Attempting to connect to server XYZ.XYZ.XYZ.XYZ:443
PIN required for Akis
Enter PIN:
Error loading certificate from PKCS#11: The requested data were not available.
Loading certificate failed. Aborting.
Failed to open HTTPS connection to XYZ.XYZ.XYZ.XYZ
Failed to obtain WebVPN cookie


Do I need specify 'type=private' to say 'use my private cert for user cert'?



More information about the openconnect-devel mailing list