Debian Bug report logs - #594429
Storing a RSA key fails on EnterSafe cards

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Firas Kraiem <firas@fkraiem.org>

To: submit@bugs.debian.org

Subject: Storing a RSA key fails on EnterSafe cards

Date: Wed, 25 Aug 2010 23:45:54 +0200

[Message part 1 (text/plain, inline)]

Package: libopensc2
Version: 0.11.13-1

I have reported this bug in Ubuntu:

https://bugs.launchpad.net/bugs/622319

I don't have a Debian system to test on right now, but I'm confident it
affects Debian as well.


How to reproduce:

Initialise the smart card:

firas@tsukino ~ % pkcs15-init -E -C --label "My Smart Card"
Using reader with a card: Feitian SCR301 00 00
New User PIN.
Please enter User PIN:
Please type again to verify:
Unblock Code for New User PIN (Optional - press return for no PIN).
Please enter User unblocking PIN (PUK):
Please type again to verify:

Generate RSA key:

firas@tsukino ~ % openssl genrsa -des3 -out mykey.key 1024
Generating RSA private key, 1024 bit long modulus
..............++++++
.......++++++
e is 65537 (0x10001)
Enter pass phrase for mykey.key:
Verifying - Enter pass phrase for mykey.key:

Try to store the key on the card:

firas@tsukino ~ % pkcs15-init -S mykey.key --auth-id ff --label "My
Private Key"
Using reader with a card: Feitian SCR301 00 00
Please enter passphrase to unlock secret key:
User PIN required.
Please enter User PIN:
pkcs15-init: card-entersafe.c:1047: entersafe_encode_bignum: Assertion
`0' failed.
zsh: abort pkcs15-init -S mykey.key --auth-id ff --label "My Private Key"

The bug has been fixed upstream and is now fixed in Ubuntu as well.  The
patch applied in Ubuntu is attached, but I can make a debdiff on the
Debian package if needed.

[fix-storing-key-on-entersafe (text/plain, attachment)]

Message #10 received at 594429@bugs.debian.org (full text, mbox, reply):

From: Martin Paljak <martin@martinpaljak.net>

To: 594429@bugs.debian.org

Subject: Fixed in upstream

Date: Tue, 31 Aug 2010 12:24:30 +0300

This has been fixed in upstream for the upcoming 0.12.0 release and also in the possible final 0.11.14 maintenance release.

Message #15 received at 594429@bugs.debian.org (full text, mbox, reply):

From: Tim Small <tim@seoss.co.uk>

To: Debian Bug Tracking System <594429@bugs.debian.org>

Subject: Re: a RSA key fails on EnterSafe cards

Date: Thu, 11 Nov 2010 12:35:12 +0000

Package: opensc
Version: 0.11.13-2pre
Severity: normal

As is looks like 0.11.13 is what's going to end up in Squeeze, any
chance of including the backported fix?  I also have a locally modified
version of the opensc packages which fix various other issues with
Entersafe cards (such that many common operations are not possible
without them).

Will open a new bug for that today...

Cheers,

Tim.

-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-openvz-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages opensc depends on:
ii  libc6                       2.11.2-7     Embedded GNU C Library: Shared lib
ii  libltdl7                    2.2.6b-2     A system independent dlopen wrappe
ii  libopensc2                  0.11.13-2pre Smart card library with support fo
ii  libreadline5                5.2-7        GNU readline and history libraries
ii  libssl0.9.8                 0.9.8o-2     SSL shared libraries

opensc recommends no packages.

opensc suggests no packages.

-- no debconf information

Message #22 received at 594429@bugs.debian.org (full text, mbox, reply):

From: Eric Dorland <eric@debian.org>

To: Martin Paljak <martin@martinpaljak.net>, 594429@bugs.debian.org

Subject: Re: Bug#594429: Fixed in upstream

Date: Tue, 4 Jan 2011 01:08:49 -0500

[Message part 1 (text/plain, inline)]

tags 594429 fixed-upstream
thanks

* Martin Paljak (martin@martinpaljak.net) wrote:
> This has been fixed in upstream for the upcoming 0.12.0 release and also in the possible final 0.11.14 maintenance release.
> 
> 
> 

-- 
Eric Dorland <eric@kuroneko.ca>
ICQ: #61138586, Jabber: hooty@jabber.com

[signature.asc (application/pgp-signature, inline)]

Send a report that this bug log contains spam.