Skip to content
Viscosity 1.1 Beta Now Available
Got a problem with Viscosity or need help? Ask here!
Hi James,
I was very happy to see PKCS11 added and did some tests with Schlumberger / Gemalto E-gate card.
I needed SCA package(s) in addition to Viscosity from http://www.opensc-project.org
Like user malary stated, certificate prompt works O.K., client gets IP address from server, but for some reason the connection never completes, and routes and DNS information is not updated.
But connection to the same server with 'normal' certificate configuration works, as well as connection from Linux with the same smartcard.
Let me know what additional information do you need.
Thanks and BR,
Ivars
I was very happy to see PKCS11 added and did some tests with Schlumberger / Gemalto E-gate card.
I needed SCA package(s) in addition to Viscosity from http://www.opensc-project.org
Like user malary stated, certificate prompt works O.K., client gets IP address from server, but for some reason the connection never completes, and routes and DNS information is not updated.
But connection to the same server with 'normal' certificate configuration works, as well as connection from Linux with the same smartcard.
Let me know what additional information do you need.
Thanks and BR,
Ivars
Last edited by shpokas on Sun Jun 20, 2010 2:58 am, edited 2 times in total.
Hi Ivars,
It looks like everything is authenticating fine, so I don't think this issue is directly related to PKCS11. My first suspicion would be that the extra delay caused by the PKCS11 authentication is bringing out another problem. Does increasing the "route-delay" value (to say 30) make any difference?
Do you get the "write to TUN/TAP : Input/output error (code=5)" error forever, or does it eventually stop (when the interface acquires an IP address) like your normal connection?
Cheers,
James
It looks like everything is authenticating fine, so I don't think this issue is directly related to PKCS11. My first suspicion would be that the extra delay caused by the PKCS11 authentication is bringing out another problem. Does increasing the "route-delay" value (to say 30) make any difference?
Do you get the "write to TUN/TAP : Input/output error (code=5)" error forever, or does it eventually stop (when the interface acquires an IP address) like your normal connection?
Cheers,
James
Web: https://www.sparklabs.com
Support: https://www.sparklabs.com/support
Twitter: https://twitter.com/sparklabs
Support: https://www.sparklabs.com/support
Twitter: https://twitter.com/sparklabs