[Pcsclite-muscle] Changes to pcscd for XSpice support

Jeremy White jwhite
Tue Oct 28 12:51:12 PDT 2014


Hi Folks,

I'm working on adding SmartCard support to 'XSpice'.

XSpice is a virtual Xorg driver connected to a spice server; think VNC 
server, but with Spice.  Primary page is spice-space.org, and the 
discussion on the spice-devel mailing list on this topic is given in [1].

XSpice has no VM; just multiple Xorg frame buffers running on the target 
server.  It is used by clients running on remote hardware; those clients 
have full pcsc stacks of their own, and are capable of passing APDU data 
to the XSpice server.  The challenge is that we want applications (e.g. 
Firefox, xdm) running on top of that frame buffer to have access to the 
client smart card data.  But we don't want clients to mix; we want each 
client to have a fully separated smart card channel.

I have a proposed design that seems sound from an XSpice perspective. 
The core idea is to preserve the application use of libpcsclite and 
libcoolkey libraries by providing a per user instance of pcscd.  There 
would be a custom spiceccd driver which would communicate with the 
XSpice server, and would provide pcscd with a virtual device to manage.

This does have implications for pcscd, though, and I was hoping to 
describe my use case and see if it makes sense.

Specifically, my plan would involve modifying pcscd to permit 
PCSCLITE_IPC_DIR to be provided by configuration, rather than being a 
compile time constant.

If my plan seems sensible, I'd be curious to know if patches with those 
changes would be accepted here.  If not, I'd be curious to hear 
alternate ideas of how to accomplish this.

Cheers,

Jeremy

[1] http://lists.freedesktop.org/archives/spice-devel/2014-July/017105.html




More information about the pcsclite-muscle mailing list