Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #173564 > unrolled thread

libccid's Info.plist update in Stretch removing Nitrokey Smartcard products?

Started byStephan Beck <sbeck@secure.mailbox.org>
First post2016-10-18 09:50 +0200
Last post2016-10-20 21:20 +0200
Articles 7 — 2 participants

Back to article view | Back to linux.debian.user


Contents

  libccid's Info.plist update in Stretch removing Nitrokey Smartcard  products? Stephan Beck <sbeck@secure.mailbox.org> - 2016-10-18 09:50 +0200
    Pardonnez-moi [was Re: libccid's Info.plist update in Stretch  removing Nitrokey Smartcard products?] Stephan Beck <sbeck@secure.mailbox.org> - 2016-10-18 16:20 +0200
      Re: Pardonnez-moi [was Re: libccid's Info.plist update in Stretch  removing Nitrokey Smartcard products?] Børge Holen <holen.borge@gmail.com> - 2016-10-18 23:10 +0200
        Re: Pardonnez-moi [was Re: libccid's Info.plist update in Stretch  removing Nitrokey Smartcard products?] Stephan Beck <sbeck@secure.mailbox.org> - 2016-10-19 10:40 +0200
          Inclusion of devices in the Info.plist of ccid [was]Re: Pardonnez-moi  [was Re: libccid's Info.plist update in Stretch removing Nitrokey Smartcard  products?] Stephan Beck <sbeck@secure.mailbox.org> - 2016-10-20 13:20 +0200
            Re: Inclusion of devices in the Info.plist of ccid [was]Re:  Pardonnez-moi [was Re: libccid's Info.plist update in Stretch removing  Nitrokey Smartcard products?] Børge Holen <holen.borge@gmail.com> - 2016-10-20 18:20 +0200
              Re: Inclusion of devices in the Info.plist of ccid [was]Re:  Pardonnez-moi [was Re: libccid's Info.plist update in Stretch removing  Nitrokey Smartcard products?] Stephan Beck <sbeck@secure.mailbox.org> - 2016-10-20 21:20 +0200

#173564 — libccid's Info.plist update in Stretch removing Nitrokey Smartcard products?

FromStephan Beck <sbeck@secure.mailbox.org>
Date2016-10-18 09:50 +0200
Subjectlibccid's Info.plist update in Stretch removing Nitrokey Smartcard products?
Message-ID<stxjP-778-19@gated-at.bofh.it>
Hi all,

when I updated my Debian testing installation on Friday using sudo
apt-get update and sudo apt-get upgrade, a note made by what appears to
be the libccid package maintainer was displayed, on the need to update
its /usr/lib/pcsc/drivers/ifd-ccid.bundle/Contents/Info.plist file.

When I looked at the diff, there were several new smartcard items added,
but there were only 4 items removed from the Info.plist file (being
marked as "-"), all belonging to the Nitrokey smartcard products. There
wasn't any other explanatory note. I did not update and continued with
the update of the rest of the packages.

So, why were those items/entries identifying Nitrokey smartcards
(Nitrokey Pro, Nitrokey storage, etc.) removed from the updated file?


Can anybody else confirm that their file got updated in that way?

Thanks in advance

Stephan

[toc] | [next] | [standalone]


#173570 — Pardonnez-moi [was Re: libccid's Info.plist update in Stretch removing Nitrokey Smartcard products?]

FromStephan Beck <sbeck@secure.mailbox.org>
Date2016-10-18 16:20 +0200
SubjectPardonnez-moi [was Re: libccid's Info.plist update in Stretch removing Nitrokey Smartcard products?]
Message-ID<stDpg-2Og-25@gated-at.bofh.it>
In reply to#173564
Hi,

now I understand what might have happened.
I guess that the Nitrokey USB token wasn't even included in the
Info.plist file, and I probably had added those entries manually long
time ago, about 9 months ago. This is the only explanation I can find
for the result of the diff.

So, the maintainer might excuse the fact that I was no longer aware of
this.
The only question then is why are the Nitrokey USB crypto sticks not
included in libbcid's Info.pList file? They showed up on the scene years
ago.

But maybe that's a question that should be directed to the package
maintainer or "upstream" directly.

Cheers

Stephan

Stephan Beck:
> Hi all,
> 
> when I updated my Debian testing installation on Friday using sudo
[...]

[toc] | [prev] | [next] | [standalone]


#173579 — Re: Pardonnez-moi [was Re: libccid's Info.plist update in Stretch removing Nitrokey Smartcard products?]

FromBørge Holen <holen.borge@gmail.com>
Date2016-10-18 23:10 +0200
SubjectRe: Pardonnez-moi [was Re: libccid's Info.plist update in Stretch removing Nitrokey Smartcard products?]
Message-ID<stJO3-7sS-51@gated-at.bofh.it>
In reply to#173570

[Multipart message — attachments visible in raw view] — view raw

On 18 Oct 2016 16:19, "Stephan Beck" <sbeck@secure.mailbox.org> wrote:
>
> Hi,
>
> now I understand what might have happened.
> I guess that the Nitrokey USB token wasn't even included in the
> Info.plist file, and I probably had added those entries manually long
> time ago, about 9 months ago. This is the only explanation I can find
> for the result of the diff.
>
> So, the maintainer might excuse the fact that I was no longer aware of
> this.
> The only question then is why are the Nitrokey USB crypto sticks not
> included in libbcid's Info.pList file? They showed up on the scene years
> ago.
>
> But maybe that's a question that should be directed to the package
> maintainer or "upstream" directly.
>
> Cheers
>
> Stephan
>
> Stephan Beck:
> > Hi all,
> >
> > when I updated my Debian testing installation on Friday using sudo
> [...]
>

I had the creator of the libccid add a smartcard reader a couple of years
ago. Took a week or so before it landed in debians reposatories. Painfree
process. I to added it manually before that. A cherry card reader if im not
mistaken...

[toc] | [prev] | [next] | [standalone]


#173583 — Re: Pardonnez-moi [was Re: libccid's Info.plist update in Stretch removing Nitrokey Smartcard products?]

FromStephan Beck <sbeck@secure.mailbox.org>
Date2016-10-19 10:40 +0200
SubjectRe: Pardonnez-moi [was Re: libccid's Info.plist update in Stretch removing Nitrokey Smartcard products?]
Message-ID<stUzL-76K-5@gated-at.bofh.it>
In reply to#173579
Hi Børge,

Børge Holen:
> On 18 Oct 2016 16:19, "Stephan Beck" <sbeck@secure.mailbox.org> wrote:

>> The only question then is why are the Nitrokey USB crypto sticks not
>> included in libbcid's Info.pList file? They showed up on the scene years
>> ago.
>>
>> But maybe that's a question that should be directed to the package
>> maintainer or "upstream" directly.
>>

> 
> I had the creator of the libccid add a smartcard reader a couple of years
> ago. Took a week or so before it landed in debians reposatories. Painfree
> process. I to added it manually before that. A cherry card reader if im not
> mistaken...

Ah, I didn't know that it's that easy. Thanks for your info. I think
I'll give it a try.

Cheers

Stephan

[toc] | [prev] | [next] | [standalone]


#173626 — Inclusion of devices in the Info.plist of ccid [was]Re: Pardonnez-moi [was Re: libccid's Info.plist update in Stretch removing Nitrokey Smartcard products?]

FromStephan Beck <sbeck@secure.mailbox.org>
Date2016-10-20 13:20 +0200
SubjectInclusion of devices in the Info.plist of ccid [was]Re: Pardonnez-moi [was Re: libccid's Info.plist update in Stretch removing Nitrokey Smartcard products?]
Message-ID<sujya-6NY-25@gated-at.bofh.it>
In reply to#173583
Stephan Beck:
> Hi Børge,
> 
> Børge Holen:
>> On 18 Oct 2016 16:19, "Stephan Beck" <sbeck@secure.mailbox.org> wrote:
> 
>>> The only question then is why are the Nitrokey USB crypto sticks not
>>> included in libbcid's Info.pList file? They showed up on the scene years
>>> ago.
>>>
>>> But maybe that's a question that should be directed to the package
>>> maintainer or "upstream" directly.
>>>
> 
>>
>> I had the creator of the libccid add a smartcard reader a couple of years
>> ago. Took a week or so before it landed in debians reposatories. Painfree
>> process. I to added it manually before that. A cherry card reader if im not
>> mistaken...
> 
> Ah, I didn't know that it's that easy. Thanks for your info. I think
> I'll give it a try.
> 
> Cheers
> 
> Stephan

Well, Børge, it seems that I wasn't as lucky as you. I asked upstream to
have Nitrokey included but he says that payment is needed for an
inclusion in the list of supported readers, as this inclusion requires
to pass a test suite that he has set up, and he does not do that for
free (a very respectable decision).
I deduce from that, that (even in your case) it have to be the
makers/suppliers who have to be sufficiently interested in having their
devices included in the list, i.e. interested to an extent that they pay
for the required tests to be performed.

Cheers

Stephan

[toc] | [prev] | [next] | [standalone]


#173641 — Re: Inclusion of devices in the Info.plist of ccid [was]Re: Pardonnez-moi [was Re: libccid's Info.plist update in Stretch removing Nitrokey Smartcard products?]

FromBørge Holen <holen.borge@gmail.com>
Date2016-10-20 18:20 +0200
SubjectRe: Inclusion of devices in the Info.plist of ccid [was]Re: Pardonnez-moi [was Re: libccid's Info.plist update in Stretch removing Nitrokey Smartcard products?]
Message-ID<suoet-1uW-9@gated-at.bofh.it>
In reply to#173626

[Multipart message — attachments visible in raw view] — view raw

Ludovic Rousseau said that?
As I understood it he deal with supported, supposed to work and unupported
list.
I see no reason why a couple of lines could not go in the same bunk as my
own cherry tc1300 lines....


On Thu, Oct 20, 2016 at 1:06 PM, Stephan Beck <sbeck@secure.mailbox.org>
wrote:

> Stephan Beck:
> > Hi Børge,
> >
> > Børge Holen:
> >> On 18 Oct 2016 16:19, "Stephan Beck" <sbeck@secure.mailbox.org> wrote:
> >
> >>> The only question then is why are the Nitrokey USB crypto sticks not
> >>> included in libbcid's Info.pList file? They showed up on the scene
> years
> >>> ago.
> >>>
> >>> But maybe that's a question that should be directed to the package
> >>> maintainer or "upstream" directly.
> >>>
> >
> >>
> >> I had the creator of the libccid add a smartcard reader a couple of
> years
> >> ago. Took a week or so before it landed in debians reposatories.
> Painfree
> >> process. I to added it manually before that. A cherry card reader if im
> not
> >> mistaken...
> >
> > Ah, I didn't know that it's that easy. Thanks for your info. I think
> > I'll give it a try.
> >
> > Cheers
> >
> > Stephan
>
> Well, Børge, it seems that I wasn't as lucky as you. I asked upstream to
> have Nitrokey included but he says that payment is needed for an
> inclusion in the list of supported readers, as this inclusion requires
> to pass a test suite that he has set up, and he does not do that for
> free (a very respectable decision).
> I deduce from that, that (even in your case) it have to be the
> makers/suppliers who have to be sufficiently interested in having their
> devices included in the list, i.e. interested to an extent that they pay
> for the required tests to be performed.
>
> Cheers
>
> Stephan
>

[toc] | [prev] | [next] | [standalone]


#173657 — Re: Inclusion of devices in the Info.plist of ccid [was]Re: Pardonnez-moi [was Re: libccid's Info.plist update in Stretch removing Nitrokey Smartcard products?]

FromStephan Beck <sbeck@secure.mailbox.org>
Date2016-10-20 21:20 +0200
SubjectRe: Inclusion of devices in the Info.plist of ccid [was]Re: Pardonnez-moi [was Re: libccid's Info.plist update in Stretch removing Nitrokey Smartcard products?]
Message-ID<sur2G-3iX-25@gated-at.bofh.it>
In reply to#173641
Hi Børge,

Børge Holen:
> Ludovic Rousseau said that?
> As I understood it he deal with supported, supposed to work and unupported
> list.
> I see no reason why a couple of lines could not go in the same bunk as my
> own cherry tc1300 lines....

> 
> 
> On Thu, Oct 20, 2016 at 1:06 PM, Stephan Beck <sbeck@secure.mailbox.org>
> wrote:
> 
>> Stephan Beck:
>>> Hi Børge,
>>>
>>> Børge Holen:
>>>> On 18 Oct 2016 16:19, "Stephan Beck" <sbeck@secure.mailbox.org> wrote:
>>>
>>>>> The only question then is why are the Nitrokey USB crypto sticks not
>>>>> included in libbcid's Info.pList file? They showed up on the scene
>> years
>>>>> ago.
>>>>>
>>>>> But maybe that's a question that should be directed to the package
>>>>> maintainer or "upstream" directly.
>>>>>
>>>
>>>>
>>>> I had the creator of the libccid add a smartcard reader a couple of
>> years
>>>> ago. Took a week or so before it landed in debians reposatories.
>> Painfree
>>>> process. I to added it manually before that. A cherry card reader if im
>> not
>>>> mistaken...
>>>
>>> Ah, I didn't know that it's that easy. Thanks for your info. I think
>>> I'll give it a try.
>>>
>>> Cheers
>>>
>>> Stephan
>>
>> Well, Børge, it seems that I wasn't as lucky as you. I asked upstream to
>> have Nitrokey included but he says that payment is needed for an
>> inclusion in the list of supported readers, as this inclusion requires
>> to pass a test suite that he has set up, and he does not do that for
>> free (a very respectable decision).
>> I deduce from that, that (even in your case) it have to be the
>> makers/suppliers who have to be sufficiently interested in having their
>> devices included in the list, i.e. interested to an extent that they pay
>> for the required tests to be performed.
>>
>> Cheers
>>
>> Stephan


Ludovic Rousseau IS the (main) author/developer of ccid/libccid driver
package (1,2,3) - based partially on existing software of two other
developers - the maintainer of Debian's libccid package and contributes
to many other smart card driver related packages/projects, really
impressive. He wrote that in order to have the Nitrokey tokens (or any
other) included in the list of supported readers, he has to charge a
fee, because the setting-up and performing of the tests is
time-intensive (and I think that this is a legitimate reason).
Aren't the list of supported readers and the content of the Info.plist
file (<VendorID> <FriendlyName>) basically the same thing? That's what I
thought.
I received an email from him (well, excluding the possibility of a faked
mail) in reply to a request I made. But, certainly I am not allowed to
simply publish it on the list without his consent.

Cheers

Stephan

(1) https://pcsclite.alioth.debian.org/ccid.html
(2) https://alioth.debian.org/anonscm/git/pcsclite/CCID.git
(3) https://www.openhub.net/accounts/LudovicRousseau
(4) https://www.openhub.net/p/libccid

[toc] | [prev] | [standalone]


Back to top | Article view | linux.debian.user


csiph-web