Pkinit with smartcard faiulure

Olga Kornievskaia aglo at citi.umich.edu
Fri Dec 1 14:28:49 EST 2006


working on a fix right now. you probably changed the protocol from DH to 
RSA? If so, then we just realized that RSA pkinit doesn't work with a 
smartcard at this point (but will be working soon).

Douglas E. Engert wrote:
> pkinit_lib.c at line 771 calls PKCS_decrypt with pkey = NULL.
>
> This is when using a Smartcard, Looks you need some more
> PKCS#11 calls here, to use the key on the card.
>
> SVN revision 18893, Ubuntu edgy, OpenSSL-0.9.8, OpenSC-0.11.1
> PIV beta card, with Windows certificate. KDC is W2K3.
>
>
>
>
>   



More information about the krbdev mailing list