Lines Matching +full:ubuntu +full:- +full:22
5 ---------------
16 April 22rd, 2005
27 --------
34 yum install libcacard-devel
36 In ubuntu::
38 apt-get install libcacard-dev
42 ./configure --enable-smartcard && make
44 Using ccid-card-emulated with hardware
45 --------------------------------------
47 user, using libcacard, QEMU acts as another client using ccid-card-emulated::
49 qemu -usb -device usb-ccid -device ccid-card-emulated
51 Using ccid-card-emulated with certificates stored in files
52 ----------------------------------------------------------
56 mkdir fake-smartcard
57 cd fake-smartcard
58 certutil -N -d sql:$PWD
59 certutil -S -d sql:$PWD -s "CN=Fake Smart Card CA" -x -t TC,TC,TC -n fake-smartcard-ca
60 certutil -S -d sql:$PWD -t ,, -s "CN=John Doe" -n id-cert -c fake-smartcard-ca
61 …certutil -S -d sql:$PWD -t ,, -s "CN=John Doe (signing)" --nsCertType smime -n signing-cert -c fak…
62 …certutil -S -d sql:$PWD -t ,, -s "CN=John Doe (encryption)" --nsCertType sslClient -n encryption-c…
68 …qemu -usb -device usb-ccid -device ccid-card-emulated,backend=certificates,db=sql:$PWD,cert1=id-ce…
72 certutil -L -r -d sql:$PWD -o fake-smartcard-ca.cer -n fake-smartcard-ca
76 certutil -A -d /etc/pki/nssdb -i fake-smartcard-ca.cer -t TC,TC,TC -n fake-smartcard-ca
81 certutil -d /etc/pki/nssdb -L -h all
88 fake-smartcard-ca CT,C,C
96 modutil -dbdir /etc/pki/nssdb -add "CAC Module" -libfile /usr/lib64/pkcs11/libcoolkeypk11.so
97 modutil -dbdir /etc/pki/nssdb -list
99 Using ccid-card-passthru with client side hardware
100 --------------------------------------------------
101 On the host specify the ccid-card-passthru device with a suitable chardev::
103 qemu -chardev socket,server=on,host=0.0.0.0,port=2001,id=ccid,wait=off \
104 -usb -device usb-ccid -device ccid-card-passthru,chardev=ccid
108 vscclient <qemu-host> 2001
110 Using ccid-card-passthru with client side certificates
111 ------------------------------------------------------
117 Run qemu as per above, and run vscclient from the "fake-smartcard"
120 qemu -chardev socket,server=on,host=0.0.0.0,port=2001,id=ccid,wait=off \
121 -usb -device usb-ccid -device ccid-card-passthru,chardev=ccid
122 …vscclient -e "db=\"sql:$PWD\" use_hw=no soft=(,Test,CAC,,id-cert,signing-cert,encryption-cert)" <q…
126 -----------------------------
128 usb-ccid is a usb device. It defaults to an unattached usb device on startup.
129 usb-ccid expects a chardev and expects the protocol defined in
131 The usb-ccid device can be in one of three modes:
140 client event | vscclient | passthru | usb-ccid | guest event
141 ------------------------------------------------------------------------------------------------
145 card inserted -> | | | |
148 | VSC_APDU | VSC_APDU | | <- guest sends APDU
149 client <-> physical | | | |
151 …client response -> | VSC_APDU | VSC_APDU | | receive APDU respon…
153 [APDU<->APDU repeats several times]
155 card removed -> | | | |
166 ---------
167 Both ccid-card-emulated and vscclient use libcacard as the card emulator.