问题标签 [tokend]

问问题

For questions regarding programming in ECMAScript (JavaScript/JS) and its various dialects/implementations (excluding ActionScript). Note JavaScript is NOT the same as Java! Please include all relevant tags on your question; e.g., [node.js], [jquery], [json], [reactjs], [angular], [ember.js], [vue.js], [typescript], [svelte], etc.

5 问题
Newest
Active
Bountied
318
Unanswered
0 投票
1 回答
2767 浏览

cryptography - 在 OS X Lion 中不推荐使用 CDSA。取而代之的是什么？

我刚刚读到CDSA 在 OS X 10.7 中已弃用。

推荐的替代品是什么？

我对插件框架特别感兴趣：实现对智能卡等的访问的新方法是什么？Tokend 现已弃用：Mail 和 Safari 使用什么来访问私钥？

0 投票
1 回答
183 浏览

macos - 标记的 probe() 函数如何工作？

SecTokend.h声明一个函数

CSSM_RETURN (*probe)(SecTokendProbeFlags flags, uint32 *score, char tokenUid[TOKEND_MAX_UID]);

在某些时候由 securityd 调用。但我找不到它何时以及如何被调用。
a) tokend 在什么条件下调用这个函数？
b) probe() 应该如何知道它必须查找哪个设备？

TIA

0 投票
1 回答
195 浏览

macos - How to debug a tokend

Is it possible (and if: how) to run a custom tokend that is started by securityd in a debugger?
Preferably within the Xcode IDE.

0 投票
2 回答
10086 浏览

keychain - Mac OS X El Capitan Smart Card Services PKCS#11 Tokend compilation and installation

I would like to install PKCS#11 Tokend to my Mac OS X El Capitan (10.11.2) so I can access PKCS#11 enabled devices from Safari.

I downloaded and install Smart Card Services for El Capitan from https://smartcardservices.macosforge.org/trac/wiki/installers.

Now I have Tokend installed in /Library/Security/tokend but there is no PKCS11.tokend, there are the following:

  • BELPIC.tokend
  • CAC.tokend
  • CACNG.tokend
  • JPKI.tokend
  • PIV.tokend

So I read on the following site that it should be included, or it can be built and copied to tokend directory to access PKCS#11 libraries stored in /usr/lib/pkcs11 or /usr/local/lib/pkcs11: http://ludovicrousseau.blogspot.cz/2010/04/free-software-tokend-above-pkcs11-for.html.

But I am not even able to successfully install darwinbuild. Also I don't want to build the whole Smart Card Services solution, I would like to build just PKCS#11.tokend and use it with KeyChain.

The building steps are not very clear for me.

How to do it for El Capitan? Or is there any version that is already built and can be used?

0 投票
1 回答
129 浏览

macos - 从标记到 Cryptotoken 套件代码签名

我们有一个通过网络使用 HSM 的代码签名设置。在 Mac 上，我们之前使用的是 tokend，但在 macOS 10.15 中，tokend 被禁用，我们需要转移到 Cryptotokenkit。是否有任何可能的建议/解决方案可以让我们从基于网络的 HSM 而不是智能卡中获取令牌？


12345678910