PeculiarVentures / fortify

Fortify enables web applications to use smart cards, local certificate stores and do certificate enrollment. This is the desktop application repository.
https://fortifyapp.com
Other
114 stars 33 forks source link

Add support for '3B9F118131FE9F006A6D546F6B656E2D5000058190006A' token #273

Open sefai opened 4 years ago

sefai commented 4 years ago

Hi there,

I have added the card and the driver to the card.json file, but I cannot see it in the providers list. Is there some other step required?

Reader name: Longmai mToken CryptoIDA ATR: 3B9F118131FE9F006A6D546F6B656E2D5000058190006A

{
   "cards": [{
    "atr": "3B9F118131FE9F006A6D546F6B656E2D5000058190006A",
    "name": "Longmai mToken CryptoIDA Reader (PKI)",
    "driver": "96cdeeaa584b4185d3c2c6d5196b32b6"
   }],
   "drivers": [{
    "id": "96cdeeaa584b4185d3c2c6d5196b32b6",
    "name": "Longmai CryptoIDA",
    "file": {
        "windows": "%WINDIR/System32/libcryptoid_pkcs11.dll",
        "osx": "/usr/local/lib/libcryptoid_pkcs11.dylib"
    }
   }]
}

Smart card ATR parsing 3B9F118131FE9F006A6D546F6B656E2D5000058190006A

microshine commented 4 years ago

@sefai Please see ~/.fortify/fortify.log file. It includes information about adding providers to the Fortify server.

sefai commented 4 years ago

@microshine I only have some logs in that file:

{"message":"Application started at Wed Jan 15 2020 17:41:18 GMT+0300 (GMT+03:00)","level":"info"} {"message":"OS darwin x64 ","level":"info"} {"message":"Fortify v1.0.21","level":"info"} {"message":"System locale is 'en-US'","level":"info"} {"message":"Locale: Set language to 'en'","level":"info"} {"message":"Fortify: Create window index","level":"info"} {"message":"Update: Check for new update","level":"info"} {"message":"Update: New version wasn't found","level":"info"} {"message":"SSL certificate is loaded","level":"info"} {"message":"Comparing current version of card.json file with remote","level":"info"} {"message":"card.json has the latest version","level":"info"} {"message":"Server: Started at 127.0.0.1:31337","level":"info"} {"message":"Provider: Add crypto 'MacOS Crypto' 0b25d67deec40f9878994b0cb837ca0cdc377a17","level":"info"} {"message":"Provider:AddCrypto: PKCS#11 '/Applications/Fortify.app/Contents/Resources/app/libpvpkcs11.dylib' '/Applications/Fortify.app/Contents/Resources/app/libpvpkcs11.dylib'","level":"info"} {"message":"Provider: Add crypto 'NSS Certificate DB' 8bbae6f98340d7a92006c21da65c1acd345ba946","level":"info"} {"message":"Provider:AddCrypto: PKCS#11 '/Applications/Fortify.app/Contents/MacOS/libsoftokn3.dylib' '/Applications/Fortify.app/Contents/MacOS/libsoftokn3.dylib'","level":"info"} {"message":"Provider:Opened","level":"info"}

microshine commented 4 years ago

There must be log like

{"message":"PCSCWatcher:Insert reader:'Rainbow Technologies iKeyVirtualReader(1)' ATR:3bff1100008131fe4d8025a00000005657444b3333300600d0","level":"info"}
{"message":"Provider:Token:Insert: reader:'Rainbow Technologies iKeyVirtualReader(1)' name:'Datakey 32K PKI Smart Card Model 330' atr:3bff1100008131fe4d8025a00000005657444b3333300600d0","level":"info"}
{"message":"Provider:Token:Insert: Loading PKCS#11 library from /usr/local/lib/libeTPkcs11.dylib","level":"info"}
{"message":"Provider:Token:Insert: Looking for Rainbow Technologies iKeyVirtualReader(1) into 1 slot(s)","level":"info"}
{"message":"Provider: Add crypto 'Datakey 32K PKI Smart Card Model 330' 589f18a3f6afcb6f02e8d8dc368d9fa01fc24974815d2e8b6debfb2b240e86a0","level":"info"}
{"message":"Provider:AddCrypto: PKCS#11 '/usr/local/lib/libeTPkcs11.dylib' 'Datakey 32K PKI Smart Card Model 330'","level":"info"}
{"message":"Provider:Token Amount of tokens was changed (+1/-0)","level":"info"}
sefai commented 4 years ago

I also thought there must be a monitoring app and looked into your repos, saw that PSCSWatcher but it seems it is not working. How can I debug or diagnose that?

microshine commented 4 years ago

It must work. Windows allows stopping PCSC service, in this case, Fortify logs error message that PCSC service is unavailable. Looks like your PCSC service works fine. Does Fortify ignore your token insertion/removing?

sefai commented 4 years ago

I am on macOS Catalina 10.15.2.