dogtagpki

#1583 SC650 format/enroll fails
Closed: Fixed Opened by rpattath.

Closed: Fixed
Reopen Issue

SC650 format/enroll fails

Steps to Reproduce:

1. Delete the applet on the SC650 card using gpshell
2. Format the card using TPS server phone home url on RHCS9

Actual results:

format fails

Expected results:

format/enroll should be successful

Additional info:

tks debug log messages
[21/Aug/2015:17:52:52][http-bio-30679-exec-14]: Protocol: null temp:
#1F#25#08#00#58#6E
[21/Aug/2015:17:52:52][http-bio-30679-exec-14]: keySet selected: defKeySet
[21/Aug/2015:17:52:52][http-bio-30679-exec-14]: keySet selected: defKeySet
[21/Aug/2015:17:52:52][http-bio-30679-exec-14]: SignedAuditEventFactory:
create() message=[AuditEvent=COMPUTE_SESSION_KEY_REQUEST][CUID_encoded=#53#4E#0
6#50#00#01#00#00#01#05][KDD_encoded=#00#00#00#00#00#00#00#00#00#00][Outcome=Suc
cess][AgentID=TPS-cloud-qe-19.idmqe.lab.eng.bos.redhat.com-31478] TKS Compute
session key request
[21/Aug/2015:17:52:52][http-bio-30679-exec-14]: processComputeSessionKey:
[21/Aug/2015:17:52:52][http-bio-30679-exec-14]: TokenServlet: serversideKeygen
requested
[21/Aug/2015:17:52:52][http-bio-30679-exec-14]: TokenServlet:
ComputeSessionKey(): tksSharedSymKeyName: sharedSecret
[21/Aug/2015:17:52:52][http-bio-30679-exec-14]: TokenServlet: Invalid card
challenge length.
[21/Aug/2015:17:52:52][http-bio-30679-exec-14]:
TokenServlet:outputString.encode status=3
[21/Aug/2015:17:52:52][http-bio-30679-exec-14]:
TokenServlet:outputString.length 8
[21/Aug/2015:17:52:52][http-bio-30679-exec-14]: SignedAuditEventFactory:
create() message=[AuditEvent=COMPUTE_SESSION_KEY_REQUEST_PROCESSED_FAILURE][CUI
D_decoded=534E0650000100000105][KDD_decoded=00000000000000000000][Outcome=Failu
re][status=3][AgentID=TPS-cloud-qe-19.idmqe.lab.eng.bos.redhat.com-31478][IsCry
ptoValidate=true][IsServerSideKeygen=true][SelectedToken=null][KeyNickName=null
][TKSKeyset=defKeySet][KeyInfo_KeyVersion=0xff][NistSP800_108KdfOnKeyVersion=0x
ff][NistSP800_108KdfUseCuidAsKdd=false][Error=Missing input parameters :
card_challenge length] TKS Compute session key request failed

commit 3e484b8c88739f0418b5220d040d163dd1b25106
Author: Jack Magne jmagne@localhost.localdomain
Date: Mon Aug 24 11:23:04 2015 -0700

SC650 format/enroll fails
Simple fix to correctly identify scp01/gp201 sc650 card.

Had to reverse merge commit:

This commit has been redone:

commit 3158e1279b210d9f409918b24180bf20b0774614
Author: Jack Magne jmagne@localhost.localdomain
Date: Mon Aug 24 11:23:04 2015 -0700

SC650 format/enroll fails
Simple fix to correctly identify scp01/gp201 sc650 card.

Metadata Update from @rpattath:
- Issue set to the milestone: 10.2.6

Dogtag PKI is moving from Pagure issues to GitHub issues. This means that existing or new
issues will be reported and tracked through Dogtag PKI's GitHub Issue tracker.

This issue has been cloned to GitHub and is available here:
https://github.com/dogtagpki/pki/issues/2142

If you want to receive further updates on the issue, please navigate to the
GitHub issue and click on Subscribe button.

Thank you for understanding, and we apologize for any inconvenience.
Metadata
None
None
None
None
Normal
defect
TPS
QE
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.