I'm using the SSP Lite interfaces for dealing with my Cyberflex Access
cards and for the most part it works pretty well (I just don't like
dealing with the blobs). I am running into a problem though:

I've rigged ssh-agent to use my smartcard instead of the private key
files normally used for RSA authentication. It actually works very
well, I just have to make it more flexible (it only works if you're me
and using a hardcoded CHV PIN :).

The problem I have is that after the first successful authentication,
the next time the card is accessed, the agent crashes. A couple things
here:
1. I think I'm connecting and disconnecting from the card reader every
time I call the card to decrypt (this was my intention at least).
After I call SCardDetach and SCardReleaseContext at the end of the
function, I should be back to where I started, right?

2. I've traced the crash to the SSP-Lite code in its DBFindCard
function during SCardAttachByIFD. It's trying to free a part of the
targetstructure that holds a bunch of strings. Is this because it's
static? I'm still not sure how this structure gets set up.

3. Is the SSP interface at all interesting? I'm using the 0.1.2a
release of the smartsign project page. Is this a popular interface on
other platforms? Is this package in use out there? I guess this is a
modified version from David's original release by Tommaso Cucinotta.

Anyway, any insight anyone can give me would be appreciated. Should I
just trash the SSP part and deal with things at the pcsc level
directly? Up until now, it's been a great help dealing with the card
for basic key management and crypt/decrypt operations.

Stephen
***************************************************************
Linux Smart Card Developers - M.U.S.C.L.E.
(Movement for the Use of Smart Cards in a Linux Environment)
http://www.linuxnet.com/smartcard/index.html
***************************************************************

Reply via email to