search

Fedict / eid-mw

eID Middleware (main repository)
GNU Lesser General Public License v3.0
202 stars 78 forks source link

Cannot read new cards #183

Closed hseg closed 1 year ago

hseg commented 1 year ago

Logs attached, reader is a OneSpan Digipass 905, eID Viewer 5.1.8 Successful read from card issued 2013, identical failures from cards issued 2016 and 2018. 2013 card verified PIN successfully, but (given it was invalidated in 2018) couldn't log in. Logs attached, with PIID censored (possibly overeagerly) success.log fail.log

yoe commented 1 year ago

It shows

C_GetSlotInfo failed with 0X5. slotID = 0

0x5 is CKR_GENERAL_ERROR. That can mean literally anything.

Can you try creating a PKCS#11 log? Please note that this will contain your PIN code in encoded format, so do not enter it (and make sure to switch off logging afterwards).

hseg commented 1 year ago

Having a little trouble. Created registry keys as described, logging works inconsistently and viewer crashes from time to time. If you have any tips on this, would be appreciated. Still, managed to get one run to spit out a p11.log with several copies of the entry

8236 11308 04.03.2023 20:03:21 cal_update_token() | oReader.GetCardType() == CARD_UNKNOWN

Attached are .BEID_0.log from two runs, perhaps you can get more data out of them. .BEID_0.run1.log .BEID_0.run2.log

hseg commented 1 year ago

Tried installing OpenSC and testing with it. Results:

C:\Users\User>"C:\Program Files\OpenSC Project\OpenSC\tools\pkcs11-tool.exe" --login --test Using slot 0 with a present token (0x0) error: PKCS11 function C_GetTokenInfo failed: rv = CKR_TOKEN_NOT_RECOGNIZED (0xe1) Aborting.

Frederikus commented 1 year ago

This could be a card reader issue. Is it possible to try with a different card reader?

hseg commented 1 year ago

Apparently the ID cards need to be activated first, and they can only be activated in Belgium? (Another expat went to consulate and failed to get hers activated there) If so, won't be able to reproduce for a while - a return trip is not in the plans for now.

El 15 de junio de 2023 14:38:14 GMT+03:00, Frederikus @.***> escribió:

This could be a card reader issue. Is it possible to try with a different card reader?

-- Reply to this email directly or view it on GitHub: https://github.com/Fedict/eid-mw/issues/183#issuecomment-1592878592 You are receiving this because you authored the thread.

Message ID: @.***>

yoe commented 1 year ago

Yes, that is correct; in consulates, by default, ID cards are not activated unless you explicitly ask for it when the card is issued.

I believe that at least some consulates now do have the ability to activate cards. I recommend you contact your consulate to ask if that is something they can do for you, if you have not already done so. If they can't help you, then you are correct that a trip to Belgium is necessary to have the card activated.

I'm going to close this issue, as the problem is not the software but the fact that the card was not activated.