[Risolto] SMARTCARD reader

[paolomolino]

buongiorno a tutti.Ho difficoltà con la 17.10 a far funzionare il lettore di smartcard reader (CNS regione toscana). Il lettore è installato correttamente, ma quando devo caricare il driver per il PKCS#11 non lo trovo nel pc. Ho seguito le istruzioni ma nics...

Codice: Seleziona tutto

paolo@paolo-desktop:~$ cd
paolo@paolo-desktop:~$ modutil -dbdir sql:.pki/nssdb/ -list

Listing of PKCS #11 Modules
-----------------------------------------------------------
  1. NSS Internal PKCS #11 Module
	   uri: pkcs11:library-manufacturer=Mozilla%20Foundation;library-description=NSS%20Internal%20Crypto%20Services;library-version=3.32
	 slots: 2 slots attached
	status: loaded

	 slot: NSS Internal Cryptographic Services
	token: NSS Generic Crypto Services
	  uri: pkcs11:token=NSS%20Generic%20Crypto%20Services;manufacturer=Mozilla%20Foundation;serial=0000000000000000;model=NSS%203

	 slot: NSS User Private Key and Certificate Services
	token: NSS Certificate DB
	  uri: pkcs11:token=NSS%20Certificate%20DB;manufacturer=Mozilla%20Foundation;serial=0000000000000000;model=NSS%203

[magozurlinux]

Buonasera.

Da terminale con il lettore di smartcard inserito postami questi comandi:

Codice: Seleziona tutto

lsusb

Codice: Seleziona tutto

dmesg | grep usb

[paolomolino]

grazie intanto!

Codice: Seleziona tutto

paolo@paolo-desktop:~$ lsusb
Bus 002 Device 002: ID 8087:8000 Intel Corp. 
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 001 Device 002: ID 8087:8008 Intel Corp. 
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 004 Device 002: ID 04e8:61b6 Samsung Electronics Co., Ltd M3 Portable Hard Drive 1TB
Bus 004 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 003 Device 009: ID 072f:90cc Advanced Card Systems, Ltd ACR38 SmartCard Reader
Bus 003 Device 005: ID 045e:0780 Microsoft Corp. Comfort Curve Keyboard 3000
Bus 003 Device 004: ID 15d9:0a4f Trust International B.V. Optical Mouse
Bus 003 Device 003: ID 177f:1610 Sweex 
Bus 003 Device 002: ID 04f9:02d1 Brother Industries, Ltd 
Bus 003 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
paolo@paolo-desktop:~$ dmesg | grep usb
[    0.085055] usbcore: registered new interface driver usbfs
[    0.085055] usbcore: registered new interface driver hub
[    0.085055] usbcore: registered new device driver usb
[    0.744075] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002
[    0.744076] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    0.744077] usb usb1: Product: EHCI Host Controller
[    0.744078] usb usb1: Manufacturer: Linux 4.13.0-16-generic ehci_hcd
[    0.744078] usb usb1: SerialNumber: 0000:00:1a.0
[    0.764071] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002
[    0.764072] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    0.764072] usb usb2: Product: EHCI Host Controller
[    0.764073] usb usb2: Manufacturer: Linux 4.13.0-16-generic ehci_hcd
[    0.764074] usb usb2: SerialNumber: 0000:00:1d.0
[    0.765519] usb usb3: New USB device found, idVendor=1d6b, idProduct=0002
[    0.765520] usb usb3: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    0.765521] usb usb3: Product: xHCI Host Controller
[    0.765521] usb usb3: Manufacturer: Linux 4.13.0-16-generic xhci-hcd
[    0.765522] usb usb3: SerialNumber: 0000:00:14.0
[    0.766265] usb usb4: New USB device found, idVendor=1d6b, idProduct=0003
[    0.766266] usb usb4: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    0.766267] usb usb4: Product: xHCI Host Controller
[    0.766268] usb usb4: Manufacturer: Linux 4.13.0-16-generic xhci-hcd
[    0.766268] usb usb4: SerialNumber: 0000:00:14.0
[    1.072022] usb 1-1: new high-speed USB device number 2 using ehci-pci
[    1.092022] usb 2-1: new high-speed USB device number 2 using ehci-pci
[    1.092030] usb 3-1: new high-speed USB device number 2 using xhci_hcd
[    1.220428] usb 1-1: New USB device found, idVendor=8087, idProduct=8008
[    1.220429] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[    1.240424] usb 2-1: New USB device found, idVendor=8087, idProduct=8000
[    1.240426] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[    1.240597] usb 3-1: New USB device found, idVendor=04f9, idProduct=02d1
[    1.240598] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[    1.240599] usb 3-1: SerialNumber: E72370L3N707034
[    1.360008] usb 3-3: new high-speed USB device number 3 using xhci_hcd
[    1.522118] usb 3-3: New USB device found, idVendor=177f, idProduct=1610
[    1.522119] usb 3-3: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[    1.522120] usb 3-3: Product: HD Widescreen Webcam
[    1.522121] usb 3-3: Manufacturer: Sweex
[    1.640002] usb 3-4: new low-speed USB device number 4 using xhci_hcd
[    1.782907] usb 3-4: New USB device found, idVendor=15d9, idProduct=0a4f
[    1.782908] usb 3-4: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[    1.782909] usb 3-4: Product:  USB OPTICAL MOUSE
[    1.788318] usbcore: registered new interface driver usbhid
[    1.788318] usbhid: USB HID core driver
[    1.789318] input:  USB OPTICAL MOUSE as /devices/pci0000:00/0000:00:14.0/usb3/3-4/3-4:1.0/0003:15D9:0A4F.0001/input/input3
[    1.789406] hid-generic 0003:15D9:0A4F.0001: input,hidraw0: USB HID v1.11 Mouse [ USB OPTICAL MOUSE] on usb-0000:00:14.0-4/input0
[    1.903987] usb 3-5: new low-speed USB device number 5 using xhci_hcd
[    2.061219] usb 3-5: New USB device found, idVendor=045e, idProduct=0780
[    2.061220] usb 3-5: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[    2.061221] usb 3-5: Product: Comfort Curve Keyboard 3000
[    2.061222] usb 3-5: Manufacturer: Microsoft
[    2.066492] input: Microsoft Comfort Curve Keyboard 3000 as /devices/pci0000:00/0000:00:14.0/usb3/3-5/3-5:1.0/0003:045E:0780.0002/input/input4
[    2.124044] hid-generic 0003:045E:0780.0002: input,hidraw1: USB HID v1.11 Keyboard [Microsoft Comfort Curve Keyboard 3000] on usb-0000:00:14.0-5/input0
[    2.129874] input: Microsoft Comfort Curve Keyboard 3000 as /devices/pci0000:00/0000:00:14.0/usb3/3-5/3-5:1.1/0003:045E:0780.0003/input/input5
[    2.188511] hid-generic 0003:045E:0780.0003: input,hidraw2: USB HID v1.11 Device [Microsoft Comfort Curve Keyboard 3000] on usb-0000:00:14.0-5/input1
[    2.307979] usb 3-7: new full-speed USB device number 6 using xhci_hcd
[    2.450976] usb 3-7: New USB device found, idVendor=072f, idProduct=90cc
[    2.451011] usb 3-7: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[    2.451012] usb 3-7: Product: CCID USB Reader
[    2.451013] usb 3-7: Manufacturer: ACS
[    2.572722] usb 3-8: new high-speed USB device number 7 using xhci_hcd
[    2.712722] usb 3-8: New USB device found, idVendor=1390, idProduct=7477
[    2.712724] usb 3-8: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[    2.712725] usb 3-8: Product: TomTom GPS Watch
[    2.712726] usb 3-8: Manufacturer: TomTom
[    2.712726] usb 3-8: SerialNumber: HR3207I00469
[    2.714748] hid-generic 0003:1390:7477.0004: hiddev0,hidraw3: USB HID v1.11 Device [TomTom TomTom GPS Watch] on usb-0000:00:14.0-8/input0
[    3.256269] usblp 3-1:1.0: usblp1: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x04F9 pid 0x02D1
[    3.256298] usbcore: registered new interface driver usblp
[    3.755971] usb 3-3: current rate 32955 is different from the runtime rate 48000
[    3.757828] usb 3-3: Warning! Unlikely big volume range (=13312), cval->res is probably wrong.
[    3.757831] usb 3-3: [5] FU [Mic Capture Volume] ch = 1, val = -5120/8192/1
[    3.758074] usbcore: registered new interface driver snd-usb-audio
[    3.765564] input: HD Widescreen Webcam: HD Widesc as /devices/pci0000:00/0000:00:14.0/usb3/3-3/3-3:1.0/input/input16
[    3.765645] usbcore: registered new interface driver uvcvideo
[   23.585421] usb 3-3: current rate 17580 is different from the runtime rate 44100
[   23.999565] usb 3-3: current rate 17580 is different from the runtime rate 44100
[   33.245373] usb 3-3: current rate 17580 is different from the runtime rate 44100
[   33.659105] usb 3-3: current rate 17580 is different from the runtime rate 44100
[   45.608238] usb 3-1: usbfs: interface 0 claimed by usblp while 'scan-thread' sets config #1
[   45.608289] usb 3-1: usbfs: process 5023 (scan-thread) did not claim interface 1 before use
[   46.718386] usb 3-1: usbfs: interface 0 claimed by usblp while 'scan-thread' sets config #1
[   46.718405] usb 3-1: usbfs: process 5023 (scan-thread) did not claim interface 1 before use
[  835.860644] usb 3-1: usbfs: interface 0 claimed by usblp while 'scan-thread' sets config #1
[  835.860685] usb 3-1: usbfs: process 5919 (scan-thread) did not claim interface 1 before use
[  836.965189] usb 3-1: usbfs: interface 0 claimed by usblp while 'scan-thread' sets config #1
[  836.965201] usb 3-1: usbfs: process 5919 (scan-thread) did not claim interface 1 before use
[ 2420.852249] usb 4-2: new SuperSpeed USB device number 2 using xhci_hcd
[ 2420.873179] usb 4-2: New USB device found, idVendor=04e8, idProduct=61b6
[ 2420.873182] usb 4-2: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2420.873183] usb 4-2: Product: Samsung M3 Portable
[ 2420.873185] usb 4-2: Manufacturer: Samsung M3 Portable
[ 2420.873186] usb 4-2: SerialNumber: CF357DFA0F000010
[ 2420.899937] usbcore: registered new interface driver usb-storage
[ 2420.909457] usbcore: registered new interface driver uas
[ 2429.495476] usb 3-8: USB disconnect, device number 7
[ 4935.329218] usb 3-7: USB disconnect, device number 6
[ 5086.064394] usb 3-7: new full-speed USB device number 8 using xhci_hcd
[ 5086.207423] usb 3-7: New USB device found, idVendor=072f, idProduct=90cc
[ 5086.207425] usb 3-7: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 5086.207427] usb 3-7: Product: CCID USB Reader
[ 5086.207427] usb 3-7: Manufacturer: ACS
[ 6595.232662] usb 3-7: USB disconnect, device number 8
[ 6596.436572] usb 3-7: new full-speed USB device number 9 using xhci_hcd
[ 6596.579831] usb 3-7: New USB device found, idVendor=072f, idProduct=90cc
[ 6596.579834] usb 3-7: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 6596.579836] usb 3-7: Product: CCID USB Reader
[ 6596.579838] usb 3-7: Manufacturer: ACS
paolo@paolo-desktop:~$ ^C
paolo@paolo-desktop:~$ 

[magozurlinux]

Prego, di nulla!

Controlla da Gestore pacchetti che siano installati questi pacchetti:

Codice: Seleziona tutto

pcscd

pcsc-tools

libccid

libpcsclite1

opensc

[paolomolino]

stranamente non mi funziona synaptic. lancio il gestore pacchetti, inserisco la password ma non mi si apre nessuna finestra. allora ho installato pacchetti di gnome, che funziona. mancava opensc, che ho installato.

[magozurlinux]

Da terminale postami questi comandi:

Codice: Seleziona tutto

uname -a

con la tessera sanitaria inserita nel lettore questi comandi:

Codice: Seleziona tutto

sudo /etc/init.d/pcscd restart 

Codice: Seleziona tutto

pcsc_scan

[paolomolino]

Non so se l'ho detto ma non trovo il file da caricare per far funzionare mozilla, mentre i due idprotect manager e id pin tool, funzionano, vede la crta, mi chiede il pin, lo accetta...ma poi su mozilla non va

Codice: Seleziona tutto

paolo@paolo-desktop:~$ uname -a
Linux paolo-desktop 4.13.0-16-generic #19-Ubuntu SMP Wed Oct 11 18:35:14 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
paolo@paolo-desktop:~$ sudo /etc/init.d/pcscd restart 
[sudo] password di paolo: 
[ ok ] Restarting pcscd (via systemctl): pcscd.service.
paolo@paolo-desktop:~$ pcsc_scan
PC/SC device scanner
V 1.5.2 (c) 2001-2017, Ludovic Rousseau <ludovic.rousseau@free.fr>
Using reader plug'n play mechanism
Scanning present readers...
0: ACS ACR 38U-CCID 00 00
 
Wed Oct 25 14:18:46 2017
 Reader 0: ACS ACR 38U-CCID 00 00
  Card state: Card inserted, 
  ATR: 3B DF 18 00 81 31 FE 7D 00 6B 02 0C 01 82 01 11 01 43 4E 53 10 31 80 FC

ATR: 3B DF 18 00 81 31 FE 7D 00 6B 02 0C 01 82 01 11 01 43 4E 53 10 31 80 FC
+ TS = 3B --> Direct Convention
+ T0 = DF, Y(1): 1101, K: 15 (historical bytes)
  TA(1) = 18 --> Fi=372, Di=12, 31 cycles/ETU
    129032 bits/s at 4 MHz, fMax for Fi = 5 MHz => 161290 bits/s
  TC(1) = 00 --> Extra guard time: 0
  TD(1) = 81 --> Y(i+1) = 1000, Protocol T = 1 
-----
  TD(2) = 31 --> Y(i+1) = 0011, Protocol T = 1 
-----
  TA(3) = FE --> IFSC: 254
  TB(3) = 7D --> Block Waiting Integer: 7 - Character Waiting Integer: 13
+ Historical bytes: 00 6B 02 0C 01 82 01 11 01 43 4E 53 10 31 80
  Category indicator byte: 00 (compact TLV data object)
    Tag: 6, len: B (pre-issuing data)
      Data: 02 0C 01 82 01 11 01 43 4E 53
    Mandatory status indicator (3 last bytes)
      LCS (life card cycle): 10 (Proprietary)
      SW: 3180 (Error not defined by ISO 7816)
+ TCK = FC (correct checksum)

Possibly identified card (using /usr/share/pcsc/smartcard_list.txt):
3B DF 18 00 81 31 FE 7D 00 6B 02 0C 01 82 01 11 01 43 4E 53 10 31 80 FC
	Italian healtcare card (TS) National Service Card (CNS) (HealthCare)

[magozurlinux]

L'output che hai postato va bene; il lettore di smartcard funziona correttamente.

Hai seguito questa documentazione?

https://wiki.ubuntu-it.org/Hardware/Per ... aleServizi

devi installare anche il pacchetto libreria libacr38u

Il tuo lettore di smartcard è il bit4ID come il mio, comprato al CUP per pochi euro; devo dire che funziona perfettamente anche con Linux.

Usi Chrome o Firefox?

Io, uso Firefox, con Chrome non me la passo.

[paolomolino]

uso firefox per questo tipo di operazioni,l funzionava con la 16.04, ora non trovo in pacchetti (ti ricordo che synaptic non funziona e in pacchetti gnome non c'è) il pacchetto libacr38u , ho seguito la guida della regione coi vari download, se cerco di lanciare il comando, mi dà permesso negato

Codice: Seleziona tutto

paolo@paolo-desktop:~$ /usr/lib/x86_64-linux-gnu/opensc-pkcs11.so
bash: /usr/lib/x86_64-linux-gnu/opensc-pkcs11.so: Permesso negato
paolo@paolo-desktop:~$ su
Password: 
su: Autenticazione non riuscita
paolo@paolo-desktop:~

[magozurlinux]

Da terminale postami questo comando:

Codice: Seleziona tutto

locate opensc-pkcs11.so

[paolomolino]

eccolo, ho provato a ricercarlo e poi immetterlo , ma mi da impossibile aggiungere modulo

Codice: Seleziona tutto

paolo@paolo-desktop:~$ locate opensc-pkcs11.so
/usr/lib/x86_64-linux-gnu/onepin-opensc-pkcs11.so
/usr/lib/x86_64-linux-gnu/opensc-pkcs11.so
/usr/lib/x86_64-linux-gnu/pkcs11/onepin-opensc-pkcs11.so
/usr/lib/x86_64-linux-gnu/pkcs11/opensc-pkcs11.so
paolo@paolo-desktop:~$ 

[magozurlinux]

Avvia Firefox, vai su Modifica > Preferenze > Avanzate > Certificati > Dispositivi di sicurezza, clicca a destra su Carica, si aprirà una finestra; cancella Nuovo modulo PKCS#11, scrivi CNS Regione Toscana e poi sotto su Nome file modulo inserisci questo percorso:

Codice: Seleziona tutto

/usr/lib/x86_64-linux-gnu/opensc-pkcs11.so

oppure clicca su Sfoglia, clicca su Computer, si aprirà l'elenco delle cartelle di sistema, clicca nelle varie cartelle seguendo il percorso del file modulo opensc-pkcs11.so e lo selezioni dall'elenco, poi clicca su OK.

Chiudi Firefox.

Inserisci il lettore di smartcard;

avvia Firefox;

inserisci la tessera sanitaria; il led del lettore dovrebbe essere acceso sul verde fisso.

Vedi se così funziona.

[paolomolino]

yessssssssss!!!gRAZIE!!!!!!!

[magozurlinux]

Prego, di nulla!

Perfetto!

[WhiSim]

la mia Business Key Lextel fa le bizze, non funziona quasi mai e il lettore non sembra funzionare....eppure un paio di volte andava benissimo, sia nella firma digitale che nell'accesso al PCT.
Ora mi da questo?

pcsc_scan
SCardEstablishContext: Service not available.

cosa devo fare?

[WhiSim]

cardpeek non vede il card reader...

[magozurlinux]

la mia Business Key Lextel fa le bizze, non funziona quasi mai e il lettore non sembra funzionare....eppure un paio di volte andava benissimo, sia nella firma digitale che nell'accesso al PCT.
Ora mi da questo?

pcsc_scan
SCardEstablishContext: Service not available.

cosa devo fare?

Prova a dare questo comando:

Codice: Seleziona tutto

sudo service pcscd restart

da terminale postami questo comando:

Codice: Seleziona tutto

dpkg -l | grep pcs

[luciop]

Ciao, m'inserisco perché ho anche io qualche problema.
Dopo i preziosi consigli di magozurlinux la CNS viene riconosciuta o almeno così mi pare.

Codice: Seleziona tutto

lucio@lucio-Not-Specified:~$ pcsc_scan -n
Using reader plug'n play mechanism
Scanning present readers...
0: OMNIKEY AG 3121 USB 00 00
 
Wed Feb  8 11:14:52 2023
 Reader 0: OMNIKEY AG 3121 USB 00 00
  Event number: 1
  Card state: Card removed, 
lucio@lucio-Not-Specified:~$ pcsc_scan -n
Using reader plug'n play mechanism
Scanning present readers...
0: OMNIKEY AG 3121 USB 00 00
 
Wed Feb  8 11:15:13 2023
 Reader 0: OMNIKEY AG 3121 USB 00 00
  Event number: 2
  Card state: Card inserted, 
  ATR: 3B DF 18 00 81 31 FE 7D 00 6B 04 0C 01 84 01 11 01 43 4E 53 10 31 80 FC

Ho volutamente tolto e poi reinserito la CNS per evidenziare i 2 diversi output
Posto anche dpkg -l | grep pcs

Codice: Seleziona tutto

lucio@lucio-Not-Specified:~$ dpkg -l | grep pcs
ii  libpcsc-perl                               1.4.14-5build2                          amd64        Perl interface to the PC/SC smart card library
ii  libpcsclite-dev:amd64                      1.9.5-3                                 amd64        Middleware to access a smart card using PC/SC (development files)
ii  libpcsclite1:amd64                         1.9.5-3                                 amd64        Middleware to access a smart card using PC/SC (library)
ii  pcsc-tools                                 1.6.0-1                                 amd64        Some tools to use with smart cards and PC/SC
ii  pcscd                                      1.9.5-3                                 amd64        Middleware to access a smart card using PC/SC (daemon side)
ii  rpcsvc-proto                               1.4.2-0ubuntu6                          amd64        RPC protocol compiler and definitions

Ma non riesco a caricare il modulo in Firefox mi si apre sempre la risposta "Impossibile aggiungere il modulo"
Ho provato diversi percorsi
/usr/lib/x86_64-linux-gnu/opensc-pkcs11.so
/lib/bit4id/libbit4xpki.so
/usr/lib/bit4id/libbit4xpki.so
Ho notato però che se clicco su sfoglia prova a caricare la seguente stringa

Codice: Seleziona tutto

/run/user/1000/doc/2eced90c/libbit4xpki.so

Ma il risultato non cambia

Come si può fare ?

[WhiSim]

cyranoxx@cyranoxx-ThinkPad-T430:~$ pcsc_scan -n
SCardEstablishContext: RPC transport error.

.....poi consudo apt upgrade:

/sbin/ldconfig.real: Cannot mmap file /lib/libbit4opki.so.rc.

/sbin/ldconfig.real: Cannot mmap file /lib/libbit4xpki.so.rc.

/sbin/ldconfig.real: /lib/libbit4opki.so.conf is not an ELF file - it has the wr
ong magic bytes at the start.

/sbin/ldconfig.real: /lib/libbit4npki.so.conf is not an ELF file - it has the wr
ong magic bytes at the start.

/sbin/ldconfig.real: /lib/libbit4ipki.so.conf is not an ELF file - it has the wr
ong magic bytes at the start.

/sbin/ldconfig.real: /lib/libbit4xpki.so.conf is not an ELF file - it has the wr
ong magic bytes at the start.

/sbin/ldconfig.real: Cannot mmap file /lib/libbit4npki.so.rc.

/sbin/ldconfig.real: Cannot mmap file /lib/libbit4ipki.so.rc.

[WhiSim]

/etc/ssh/sshd_config
bash: /etc/ssh/sshd_config: Permesso negato

~$ ssh-keygen -D /usr/lib/x86_64-linux-gnu/opensc-pkcs11.so > smartcard.pub
cannot read public key from pkcs11