summaryrefslogtreecommitdiffstats
path: root/scd
diff options
context:
space:
mode:
authorWerner Koch <wk@gnupg.org>2020-06-30 14:41:20 +0200
committerWerner Koch <wk@gnupg.org>2020-06-30 14:41:49 +0200
commit07aef873ebc77241e9a2be225537319f6fc15a41 (patch)
treebc483fe0b945069f3c195c810b5883f1dedbb7bb /scd
parentscd: Change how the removed card flag is set. (diff)
downloadgnupg2-07aef873ebc77241e9a2be225537319f6fc15a41.tar.xz
gnupg2-07aef873ebc77241e9a2be225537319f6fc15a41.zip
scd:nks: Fix certificate read problem with TCOS signature card v2.
* scd/app-nks.c (filelist): Add a dedicated key entry for ESIGN. (do_readcert): Test for the app_id. Signed-off-by: Werner Koch <wk@gnupg.org>
Diffstat (limited to 'scd')
-rw-r--r--scd/app-nks.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/scd/app-nks.c b/scd/app-nks.c
index 53e166ed5..e09015d55 100644
--- a/scd/app-nks.c
+++ b/scd/app-nks.c
@@ -156,6 +156,7 @@ static struct
{ 1, 0xC008, 3, 101 }, /* EF_C.CA.SIG */
{ 1, 0xC00E, 3, 111 }, /* EF_C.RCA.SIG */
+ { 2, 0x4531, 15, 0, 0xC001, 0,1,1, 0x84}, /* EF_PK.CH.SIG */
{ 2, 0xC000, 15,101 }, /* EF.C.SCA.QES (SubCA) */
{ 2, 0xC001, 15,100 }, /* EF.C.ICC.QES (Cert) */
{ 2, 0xC00E, 15,111 }, /* EF.C.RCA.QES (RootCA */
@@ -1006,6 +1007,7 @@ do_readcert (app_t app, const char *certid,
fid = xtoi_4 (certid);
for (i=0; filelist[i].fid; i++)
if ((filelist[i].certtype || filelist[i].iskeypair)
+ && filelist[i].nks_app_id == nks_app_id
&& filelist[i].fid == fid)
break;
if (!filelist[i].fid)