[Muscle] inexpensive pci express card that works with muscle and DoD cards?

[Todd Denniston]

Ted T. Logan wrote, On 04/15/2009 06:37 PM:
> Sorry for the redundant messages, but pcscd definitely seems to be
> working with it:
> 
> 
> 00049133 eventhandler.c:451:EHStatusHandlerThread() Card inserted into
> SCM SCR 3340 ExpressCard54 00 00
> 00000023 eventhandler.c:465:EHStatusHandlerThread() Error powering up
> card.
> 10880748 eventhandler.c:383:EHStatusHandlerThread() Card Removed From
> SCM SCR 3340 ExpressCard54 00 00
> 00855989 ifdhandler.c:924:IFDHPowerICC() lun: 0, action: PowerUp
> 00965608 eventhandler.c:451:EHStatusHandlerThread() Card inserted into
> SCM SCR 3340 ExpressCard54 00 00
> 
> it detects when i insert, remove, etc my CAC card.
> 
> I guess my question is, how do I now use it with firefox?  It seems
> libcoolkey.so is not the way, as I used to with the usb reader.  Is
> there another library I use to use it with firefox to check OWA?
> 
> Thanks!

Why is it that you believe coolkey is not what you want to use?
Are you sure your card has not locked? (I hate trying out new things with the 
CAC... I almost always get to make one trip to the unlock person.)

CoolKey interacts with pcscd which through the ifdhandler has abstracted away 
the physical connection.

suggestion,
assuming pam_pkcs11 is setup {which on fedora >= 8 or CentOS) it is, except 
for needing the nssdb built.
try the `pkcs11_inspect debug` command [be aware this will echo your pin back 
in the *clear*].

if it works, then following your pin will be listings showing one or two of 
your X.509 certs with their subject, issuer, and algorithm shown.
After showing that it will then try to match your CN against the user 
databases and verify against the CA databases.
If the X.509s are shown, then CoolKey is working.


-- 
Todd Denniston
Crane Division, Naval Surface Warfare Center (NSWC Crane)
Harnessing the Power of Technology for the Warfighter