[Pki-users] US Government SmartCard question

[John Magne]

Bryce:

Yes, that helps. 
I can take a look at the code when I get a moment.
Also we might bring in Bob Relyea rrelyea at redhat.com since he is the coolkey and coolkey/CAC guru.


----- Original Message -----
From: "Bryce L Nordgren -FS" <bnordgren at fs.fed.us>
To: "John Magne" <jmagne at redhat.com>
Cc: pki-users at redhat.com
Sent: Friday, May 1, 2015 11:13:01 AM
Subject: RE: [Pki-users] US Government SmartCard question

Hi Jack,

I wasn't quite sure how to capture an insertion event with pkcs11_inspect. It seems to fail right away if nothing's in the reader. So I ran "pkcs11_eventmgr debug nodaemon" in the terminal that had the COOL_KEY_LOG_FILE variable set. I also ran a pkcs11_inspect with a card already inserted. Log files for both runs are attached.

It's not super verbose, but the root cause seems to be "CAC Select failed".

Does this shed any light on the problem? 

Thanks,
Bryce