read cert from smart card

[Mithat Bozkurt]

I still have same error on p11-kit command though remove /etc/pkcs11
and reboot. I don't understand Why I see this output

C_Initialize
  IN: pInitArgs = NULL
C_Initialize = CKR_ARGUMENTS_BAD

So I recreated that directory and akis.module and change module path
as below now Is it OK??????

#AKIS
#module: /usr/lib/libakisp11.so
module: /usr/lib/x86_64-linux-gnu/opensc-pkcs11.so
managed: yes
trust-policy: yes
log-calls: yes


after this output of p11-kit command as below

mithat at adige:/etc/pkcs11/modules$ p11-kit list-modules
C_Initialize
  IN: pInitArgs = NULL
C_Initialize = CKR_OK
p11-kit-trust: p11-kit-trust.so
    library-description: PKCS#11 Kit Trust Module
    library-manufacturer: PKCS#11 Kit
    library-version: 0.23
    token: System Trust
        manufacturer: PKCS#11 Kit
        model: p11-kit-trust
        serial-number: 1
        hardware-version: 0.23
        flags:
               write-protected
               token-initialized
akis: /usr/lib/x86_64-linux-gnu/opensc-pkcs11.so
C_GetInfo
 OUT: pInfo = {
cryptokiVersion: 2.20
manufacturerID: "OpenSC (www.opensc-project.org)"
flags: 0
libraryDescription: "Smart card PKCS#11 API"
libraryVersion: 0.0
      }
C_GetInfo = CKR_OK
    library-description: Smart card PKCS#11 API
    library-manufacturer: OpenSC (www.opensc-project.org)
    library-version: 0.0
C_GetSlotList
  IN: tokenPresent = CK_TRUE
  IN: pulCount = 0x7FFF1CE07958 = 256
 OUT: pSlotList = (0) [  ]
C_GetSlotList = CKR_OK
gnome-keyring: gnome-keyring-pkcs11.so
    library-description: GNOME Keyring Daemon Core
    library-manufacturer: GNOME Keyring
    library-version: 1.1
    token: SSH Keys
        manufacturer: Gnome Keyring
        model: 1.0
        serial-number: 1:SSH:HOME
        flags:
               write-protected
               user-pin-initialized
               protected-authentication-path
               token-initialized
    token: Secret Store
        manufacturer: Gnome Keyring
        model: 1.0
        serial-number: 1:SECRET:MAIN
        flags:
               login-required
               user-pin-initialized
               protected-authentication-path
               token-initialized
    token: Gnome2 Key Storage
        manufacturer: Gnome Keyring
        model: 1.0
        serial-number: 1:USER:DEFAULT
        flags:
               login-required
               user-pin-initialized
               protected-authentication-path
               token-initialized
    token: User Key Storage
        manufacturer: Gnome Keyring
        model: 1.0
        serial-number: 1:XDG:DEFAULT
        flags:
               protected-authentication-path
               token-initialized
C_Finalize
  IN: pReserved = NULL
C_Finalize = CKR_OK


By the way I run that command in verbose mode after that still print
out verbose mode without -v parameter.


2016-02-21 23:09 GMT+02:00 Mithat Bozkurt <mithatbozkurt at gmail.com>:
> I think opensc version 0.15.0 includes AKIS. You can see akis driver info.
>
> mithat at adige:~$ opensc-tool -D
> Configured card drivers:
>   cardos           Siemens CardOS
>   flex             Schlumberger Multiflex/Cryptoflex
>   cyberflex        Schlumberger Cyberflex
>   gpk              Gemplus GPK
>   gemsafeV1        driver for the Gemplus GemSAFE V1 applet
>   miocos           MioCOS 1.1
>   asepcos          Athena ASEPCOS
>   starcos          STARCOS SPK 2.3/2.4
>   tcos             TCOS 3.0
>   openpgp          OpenPGP card
>   jcop             JCOP cards with BlueZ PKCS#15 applet
>   oberthur         Oberthur AuthentIC.v2/CosmopolIC.v4
>   authentic        Oberthur AuthentIC v3.1
>   iasecc           IAS-ECC
>   belpic           Belpic cards
>   ias              IAS
>   incrypto34       Incard Incripto34
>   acos5            ACS ACOS5 card
>   akis             TUBITAK UEKAE AKIS
>   entersafe        entersafe
>   epass2003        epass2003
>   rutoken          Rutoken driver
>   rutoken_ecp      Rutoken ECP driver
>   westcos          WESTCOS compatible cards
>   myeid            MyEID cards with PKCS#15 applet
>   sc-hsm           SmartCard-HSM
>   dnie             DNIe: Spanish eID card
>   MaskTech         MaskTech Smart Card
>   mcrd             MICARDO 2.1 / EstEID 1.0 - 3.0
>   setcos           Setec cards
>   muscle           MuscleApplet
>   atrust-acos      A-Trust ACOS cards
>   piv              PIV-II  for multiple cards
>   itacns           Italian CNS
>   isoApplet        Javacard with IsoApplet
>   default          Default driver for unknown cards
>
>
> 2016-02-21 22:51 GMT+02:00 Mithat Bozkurt <mithatbozkurt at gmail.com>:
>> https://github.com/OpenSC/OpenSC/wiki/AKiS-cards says that "It is also
>> only available in OpenSC svn /trunk/ and not included in any OpenSC
>> release yet."
>>
>> On the other hand Maybe site is not up-to-date. Since site doesn't say
>> new features of AKIS such as  SHA-256, Common Criteria (CC) EAL5+. I
>> asked to TUBITAK  for this.
>>
>> Thank you.
>>
>> 2016-02-21 22:03 GMT+02:00 David Woodhouse <dwmw2 at infradead.org>:
>>> On Sun, 2016-02-21 at 21:53 +0200, Mithat Bozkurt wrote:
>>>> I install opensc from ubuntu software center. Do I need to do
>>>> additional thing?
>>>
>>> I don't know. I don't know if Ubuntu packages OpenSC correctly. Does it
>>> show up when you run 'p11-kit --list-tokens'?
>>>
>>> I would expect it to work in Fedora, but that's not *necessarily* a
>>> helpful comment.
>>>
>>> --
>>> dwmw2
>>>