comparison: opensc/README
opensc/README
- changeset 4
- b696a44762ea
equal
deleted
inserted
replaced
| -1:000000000000 | 0:a9360a7452b1 |
|---|---|
| 1 NOTE | |
| 2 | |
| 3 It seems there are problems with opensc(5) and pcscd(8) coexistence. | |
| 4 | |
| 5 It has been observed that pcscd(8) performs correctly in the absence | |
| 6 of /usr/lib/opensc-pkcs11.so. Namely, pcscd(8) does not run until a | |
| 7 end user accesses the smart card harware using a client application. | |
| 8 Once this happens, pcscd(8) starts with user and group permissions | |
| 9 of the end user and the client application procedes normally. | |
| 10 | |
| 11 Should /usr/lib/opensc-pkcs11.so be present, pcscd(8) starts at | |
| 12 system boot with root privileges. Once a end user accesses the smart | |
| 13 card hardware, a second instance of pcscd(8) is launched, the script | |
| 14 /etc/init.d/pcscd is executed with the end user's user and group | |
| 15 permissions. The script causes deletion of /var/run/pcscd where | |
| 16 important connection information is stored by the first pcscd(8) | |
| 17 instance running with root privileges. It may be this deletion | |
| 18 which causes all client applications to fail to access the smart | |
| 19 card hardware. | |
| 20 | |
| 21 The workaround is to manually edit the script /etc/init.d/pcscd | |
| 22 so that /var/run/pcscd is not removed, but this appears to be | |
| 23 a short lived hack. Adequate testing has not proven this approach | |
| 24 to be correct. | |
| 25 | |
| 26 # FIXME: Fat bug, don't overwrite important | |
| 27 # FIXME: preexisting pcscd(8) connection data! | |
| 28 [ -e $IPCDIR/$NAME.comm ] && exit 0 | |
| 29 | |
| 30 SCDAEMON BLOCKED | |
| 31 | |
| 32 Problems exist when using applications calling scdaemon(8) which | |
| 33 locks access to the card reader. No solution exists, rather a | |
| 34 workaround is to forcefully kill the scdaemon(8) server. This | |
| 35 is a problem for those users of gpg(1) because of its indirect | |
| 36 usage of scdaemon(8) and inability to call opensc(5) for any | |
| 37 PKCS functions. |
