fasferraz / SWu-IKEv2

IKEv2/IPSec SWu Client Dialer
GNU General Public License v3.0
44 stars 20 forks source link

APDUs use problematic select P2 #4

Open laf0rge opened 3 years ago

laf0rge commented 3 years ago

You're curerntly using SELECT APDUs like 00 a4 00 00 02 3f 00

Those are creating problem with several USIM cards here. The reason is that P2 == 00. If youc check with Table 11.2 of ETSI TS 102 221, they you see that normally one would use either "04" for "return FCP template' or "0C" for "no data returned". I normally use "04" with all the cards I have seen, and never have any problems.

I'll submit a related patch / pull request shortly.

laf0rge commented 3 years ago

I think it may be best to simply always use the http/REST server for USIM access, which cleanly separates the smart card related bits from the core SWu IPsec client.