PKCS#11

• A PKCS#11 cryptographic provider is available in J2SE 5.0.
• JavaTM PKCS#11 Reference Guide
• Source for sun.security.pkcs11 classes
• Use -Djava.security.debug=sunpkcs11,pkcs11 for debugging
• The main class of the provider is sun.security.pkcs11.SunPKCS1.
• Access to lower level PKCS#11 functions is through sun.security.pkcs11.wrapper.PKCS11.
• Java Applet for signing with a smartcard
• IAIK PKCS#11 Wrapper
• IAIK PKCS#11 Provider for JCA/JCE

JPCSC

• MuscleCard Middleware Download
• mkdir -p /usr/local/depot/jpcsc-0.8.0/share/doc/jpcsc
• make
• If you get "error: too few arguments to function 'SCardControl'," modify src/jpcsc/jpcsc.c and change line
  1039 to #if defined(WIN32) || defined(HAVE_SCARD_ATTRIBUTES) || 1.

• $ make test make -C src/samples test make[Agenda & Notes 9-12-2006]: Entering directory `/usr2/local/src/Aladdin/jpcsc-0.8.0/src/samples' export LD_LIBRARY_PATH=/usr/local/lib::/opt/oracle/lib/oracle/xe/app/oracle/product/10.2.0/client/lib; /opt/jdk/bin/java -Djava.library.path="../../build/linux" -cp ../../build/java/jpcsc.jar:../../build samples.Test EstablishContext(): ... Wait for card in a certain reader ... Pick reader ... reader 0: AKS ifdh 00 00 reader 1: Reflex USB 00 00 Select reader (1-n): 1 Please, insert card into reader Reflex USB 00 00 ... Card inserted into Reflex USB 00 00 Card ATR is 13: 3BF29800FFC11031FE55C80315 Connect to card Reflex USB 00 00 Type APDU to send or q to leave: q make\[1\]: Leaving directory `/usr2/local/src/Aladdin/jpcsc-0.8.0/src/samples'

• JPCSC Tool (make tool) Screen Shot
• file:///usr/local/share/doc/jpcsc/api/index.html

Open Card Framework

Note: This works, but OCF appears to be dead. See JPCSC or JCOP offcard services.

OCF Installation

• OpenCard.org Downloads
  • You'll need OpenCard Framework All-in-One. The file is installOCF.
• This installation can be done as non-root if you create and chown the necessary files in /usr/bin and you save the config file in your home directory.
  • installOCF.sh - script to create the required files and directories.
• Run java installOCF
  • Destination Directory: /opt/OpenCard
  • Program Folder: OpenCard (default)
  • You probably want to use PCSC readers.
  • Destination Directory for config file: /home/whatever
• Fix ownership of files if you installed as non-root.
• Optional: Move stuff from /usr/bin to /opt/OpenCard/usr.bin.

• To set up your environment: . setupOCF.sh. (PB script, not attached yet)
• You will need the opencard.properties in your current directory, or
  • [java.home]/lib/opencard.properties
  • [user.home]/.opencard.properties
  • [user.dir]/opencard.properties
  • [user.dir]/.opencard.properties

OCF To PC/SC Shim

You need libOCFPCSC to interface to the native PCSC libraries.

• MuscleCard Middleware Download
• Fix Makefile: Use LD=g++ and fix directories for your installation.

Testing

• Copy OCF1.2/components/sb-demo/src/demos/samples/GetCardID.java to your working directory.
• Comment out the line package demos.samples; line.
• CLASSPATH=$OCF_CLASSPATH javac GetCardID.java
• CLASSPATH=$OCF_CLASSPATH:. java GetCardID

• $ LD_LIBRARY_PATH=/usr/local/lib CLASSPATH=$OCF_CLASSPATH:. java GetCardID ------------------------------------------------------------ start use case: get a card ID Obtained the following CardID: 3B F2 98 00 FF C1 10 31 FE 55 C8 03 15 Historicals: C8 03 as a string: finished use case: get a card ID ------------------------------------------------------------

JCOP