tokend does not work any more

[tatac1]

my environment is

• ProductName: Mac OS X
• ProductVersion: 10.15.1
• BuildVersion: 19B88

opensc version is OpenSC-0.20.0-rc1-15-geac516f, rev: eac516f, commit-time: 2019-10-03 13:57:09 +0200

I run sudo defaults write /Library/Preferences/com.apple.security.smartcard Legacy -bool true then reboot.

pcsctest result is PC/SC Test Completed Successfully ! also pkcs11-tool --test --login result is No errors}

[zviratko]

not only OpenSC.tokend broke, my 3rd party s*y-vendor-provided-one doesn't work either on 10.15.1 and 10.15.2 beta.

[pawel-marciniak]

For me pkcs11-tool --test --login results in No slot with a token was found.. Aby solution to that?

[avvRobertoAlma]

Try to install the release candidate of OpenSC 0.20.0. It should install the fixed version of OpenSC Token which should enable full support of CryptoTokenKit on Catalina. There was an issue solved here

[pawel-marciniak]

@avvRobertoAlma Thanks for the tip, but I already has this version installed :/ system_profiler SPSmartCardsDataType command shows that there aren't any Tokend Drivers in my system, maybe this is the issue.

[avvRobertoAlma]

I am on Catalina 10.15.0. I tried the release candidate of OpenSC 0.20.0 and it seems that the old fashioned tokend was removed from the system.

I reinstalled OpenSC 0.19.0 and same output of @pawel-marciniak from system_profiler SPSmartCardsDataType.

Then I reinstalled OpenSC 0.18.0 and now everything works as usual and i have this output from system_profiler SPSmartCardsDataType:

SmartCards:

    Readers:

      #01: Gemalto PC Twin Reader (ATR:{length = 25, bytes = 0x3bff1800 008131fe 55006b02 09040301 ... 01434e53 10318065 })
      #02: Bit4id CKey4 (ATR:{length = 25, bytes = 0x3bff1800 008131fe 55006b02 09040301 ... 01434e53 10318065 })

    Reader Drivers:

      #01: org.debian.alioth.pcsclite.smartcardccid:1.4.31 (/usr/libexec/SmartCardServices/drivers/ifd-ccid.bundle)
      #02: org.debian.alioth.pcsclite.smartcardccid:1.4.27 (/Library/bit4id/ccid/ifd-ccid.bundle)

    Tokend Drivers:

      #01: com.apple.tokend.opensc:1.0 (/Library/Security/tokend/OpenSC.tokend)
      #02: com.apple.tokend.bit4tokend:1.0 (/Library/bit4id/tokend/10.6/BIT4ID.tokend)

    SmartCard Drivers:

      #01: org.opensc-project.mac.opensctoken.OpenSCTokenApp.OpenSCToken:1.1.1 (/Users/Roberto/Documents/progetti/OpenSCToken/build/Applications/OpenSCTokenApp.app/Contents/PlugIns/OpenSCToken.appex)
      #02: com.apple.CryptoTokenKit.pivtoken:1.0(disabled) (/System/Library/Frameworks/CryptoTokenKit.framework/PlugIns/pivtoken.appex)

    Available SmartCards (keychain):

        com.apple.setoken:aks:

        org.opensc-project.mac.opensctoken.OpenSCTokenApp.OpenSCToken:2444024000055028:

          #01: Kind: private RSA 1024-bit, Certificate: {length = 20, bytes = 0x57bdcc087169af26bd78dfe244a0e7e08acc1d32}, Usage: Sign Decrypt Unwrap 
Valid from: 2018-01-08 10:55:00 +0000 to: 2021-01-06 23:00:00 +0000, SSL trust: YES, X509 trust: YES 

-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgIIQNkkSkDdpwkwDQYJKoZIhvcNAQEFBQAwejELMAkGA1UEBhMCSVQxJDAiBgNVBAoMG05hbWlyaWFsIFMucC5BLi8wMjA0NjU3MDQyNjEgMB4GA1UECwwXQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxIzAhBgNVBAMMGk5hbWlyaWFsIENBIEF1dGVudGljYXppb25lMB4XDTE4MDEwODEwNTUwMFoXDTIxMDEwNjIzMDAwMFowgcQxCzAJBgNVBAYTAklUMSkwJwYDVQQKDCBPUkRJTkUgQVZWT0NBVEkgUk9NQS84MDIzMDEzMDU4NzEdMBsGA1UECwwUT1JESU5FIEFWVk9DQVRJIFJPTUExRzBFBgNVBAMMPkxNQVJSVDg1UjExSDUwMUsvMjQ0NDAyNDAwMDA1NTAyOC5HRk9lMnRNbjczOU54WVR5eWpmeHIzejN6NWs9MSIwIAYJKoZIhvcNAQkBFhNST0JFUlRPLkFMTUFAUEVDLklUMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCBFaqwp0oGTVfa348syiuF6E3suuRs5McsMBKMDm2NCE4XDrM98eEXNPezsuik0vk1Kg2zxbLVHyqR3Lnc5UZIbn0kEJD4pLS104+nmLMpwtfDqSyj7bPsknmg6zABGaKAJzgCk1jQhrFtu/cAdhHG32Smp+uHxEevz6hUCQgzZQIDAQABo4IC9jCCAvIwgZYGCCsGAQUFBwEBBIGJMIGGME0GCCsGAQUFBzAChkFodHRwczovL2RvY3MuZmlybWFjZXJ0YS5pdC9kb2N1bWVudHMvTmFtaXJpYWxDQUF1dGVudGljYXppb25lLmNydDA1BggrBgEFBQcwAYYpaHR0cDovL29jc3AuZmlybWFjZXJ0YS5pdC9vY3NwL2NlcnRzdGF0dXMwHQYDVR0OBBYEFFe9zAhxaa8mvXjf4kSg5+CKzB0yMB8GA1UdIwQYMBaAFL7ZEcJX/lqfvpCdNuaTIc9HV9FaMIIBkQYDVR0gBIIBiDCCAYQwQQYLKwYBBAGCmmsEAQQwMjAwBggrBgEFBQcCARYkaHR0cDovL3d3dy5maXJtYWNlcnRhLml0L21hbnVhbGktTU8vMIIBPQYFK0wQAgEwggEyMIIBLgYIKwYBBQUHAgIwggEgHoIBHABJAGQAZQBuAHQAaQBmAGkAZQBzACAAWAAuADUAMAA5ACAAYQB1AHQAaABlAG4AdABpAGMAYQB0AGkAbwBuACAAYwBlAHIAdABpAGYAaQBjAGEAdABlAHMAIABpAHMAcwB1AGUAZAAgAGYAbwByACAAdABoAGUAIABpAHQAYQBsAGkAYQBuACAATgBhAHQAaQBvAG4AYQBsACAAUwBlAHIAdgBpAGMAZQAgAEMAYQByAGQAIAAoAEMATgBTACkAIABwAHIAbwBqAGUAYwB0ACAAaQBuACAAYQBjAGMAbwByAGQAaQBuAGcAIAB0AG8AIAB0AGgAZQAgAGkAdABhAGwAaQBhAG4AIAByAGUAZwB1AGwAYQB0AGkAbwBuMEcGA1UdHwRAMD4wPKA6oDiGNmh0dHA6Ly9jcmwuZmlybWFjZXJ0YS5pdC9GaXJtYUNlcnRhQXV0ZW50aWNhemlvbmUxLmNybDAOBgNVHQ8BAf8EBAMCBaAwKQYDVR0lBCIwIAYIKwYBBQUHAwIGCCsGAQUFBwMEBgorBgEEAYI3FAICMA0GCSqGSIb3DQEBBQUAA4IBAQBbhFpWuSRO7kWqE0u1ggYU3Ql4n8R5jEvegbKFWMU1Jc2zQMgCEjYeHiZF06AvPA0OvVHYKVq7kpo8YaCUfHxpj6QB5eoKa3rEik5O9AHdrJqVksRLn+rMH/d/lltKuEE9bqXatlucfw6Mi0iDYg6xkSMjl0ZaKLx+FgAcc66oRzgYXiBj4V/ON1XCX5eDPsDjgzNHQk+x8CyJvSU/+DxEmriXyebaHC9qwZawEVoNkZUNy1LvJrK+3GHkuFPDA9HX4zLoPiTMFj4dA5tzRHV24WIjI18EqkB6l0HMzFVhTBOKJghsrBzVNJnx5kgot8oPb2etCDgQ4m1eU8KJxa/c
-----END CERTIFICATE-----


        org.opensc-project.mac.opensctoken.OpenSCTokenApp.OpenSCToken:7430010009970702:

          #01: Kind: private RSA 1024-bit, Certificate: {length = 20, bytes = 0x4a62be70fac3b0099400d829d12381a76603555e}, Usage: Sign Decrypt Unwrap 
Valid from: 2019-10-16 00:00:00 +0000 to: 2022-10-15 23:59:59 +0000, SSL trust: NO, X509 trust: YES 

-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgIQKmGKRrA1TTGCZJR0de8SDzANBgkqhkiG9w0BAQUFADBsMQswCQYDVQQGEwJJVDEYMBYGA1UECgwPQXJ1YmFQRUMgUy5wLkEuMSEwHwYDVQQLDBhDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eUIxIDAeBgNVBAMMF0FydWJhUEVDIFMucC5BLiBORyBDQSAyMB4XDTE5MTAxNjAwMDAwMFoXDTIyMTAxNTIzNTk1OVowgeExRzBFBgNVBAMMPkxNQVJSVDg1UjExSDUwMUsvNzQzMDAxMDAwOTk3MDcwMi5vQVVNbWlYcXVEZ2ZQNXJzZWNKdkxXckJIYzQ9MRwwGgYDVQQFExNJVDpMTUFSUlQ4NVIxMUg1MDFLMRAwDgYDVQQqDAdSb2JlcnRvMQ0wCwYDVQQEDARBbG1hMSUwIwYDVQQKDBxQcm9nZXR0byBDTlMgQXJ1YmFwZWMvVW5pY2FsMSMwIQYDVQQLDBpVbml2ZXJzaXRhJyBkZWxsYSBDYWxhYnJpYTELMAkGA1UEBhMCSVQwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBALFdJ7wpYzJQbIBmorGcC/O1ANvBlNsGzWi2WuJGCyGpRAlIZ4kxeNBIQYjH6TJSQCYP4oS3dVWo7fNPNZ1oMlibOPbOWRq0yuvCQBccmYfvo+rGdkzpESVsfyuoG8UMizYjIP3GPoqHc3B8GgI3cP6p2KuI6LgEcLIRM5KtRt0vAgMBAAGjggI1MIICMTCB9wYDVR0gBIHvMIHsMIGrBgUrTBACATCBoTCBngYIKwYBBQUHAgIwgZEagY5JZGVudGlmaWVzIFguNTA5IGF1dGhlbnRpY2F0aW9uIGNlcnRpZmljYXRlcyBpc3N1ZWQgZm9yIHRoZSBpdGFsaWFuIE5hdGlvbmFsIFNlcnZpY2UgQ2FyZCAoQ05TKSBwcm9qZWN0IGluIGFjY29yZGluZyB0byB0aGUgaXRhbGlhbiByZWd1bGF0aW9uMDwGCysGAQQBgegtAQECMC0wKwYIKwYBBQUHAgEWH2h0dHBzOi8vY2EuYXJ1YmFwZWMuaXQvY3BzLmh0bWwwWAYDVR0fBFEwTzBNoEugSYZHaHR0cDovL2NybC5hcnViYXBlYy5pdC9BcnViYVBFQ1NwQUNlcnRpZmljYXRpb25BdXRob3JpdHlCL0xhdGVzdENSTC5jcmwwDgYDVR0PAQH/BAQDAgWgMB8GA1UdIwQYMBaAFPL/Y0AcEUL9zN/xWfZu6JmHMUd5MB0GA1UdDgQWBBRKYr5w+sOwCZQA2CnRI4GnZgNVXjArBgNVHREEJDAigSByb2JlcnRvLmFsbWFAc3R1ZGlvbGVnYWxlYWxtYS5pdDAzBggrBgEFBQcBAQQnMCUwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmFydWJhcGVjLml0MCkGA1UdJQQiMCAGCCsGAQUFBwMCBgorBgEEAYI3FAICBggrBgEFBQcDBDANBgkqhkiG9w0BAQUFAAOCAQEACiricpBsYIh2tGr3GgMBg63v9J8t16H2w1QFXrJnHv3FjaXKsijmO4typD5f6cDA/p+Gpi46t16eBhKsQBOEDmlR3If+23uXVtkgPcBcjO3u8Y9IVUmuJwxyPWHTJhYD2xjzGdH3T0KFiL8yFpN1Wm2om6EEt9hqAjXXmFnIb2yrByEo3W8ti6Hd7hchcSiqPLLmACcomPSiLV0pjRdKQtXfcZL8b//Dc5kfrdZwnUX2gOl8xVBDedJvla53maF4XAut3R8oKnfYAqroP9SE7hRuP9yO6GCSk6W35kd60EJS8VhioJA5Do4eW4EUT4e957WFb5hryQz21jmxGY/5lA==
-----END CERTIFICATE-----


    Available SmartCards (token):

        com.apple.setoken:aks:

        org.opensc-project.mac.opensctoken.OpenSCTokenApp.OpenSCToken:2444024000055028:

          #01: Kind: private RSA 1024-bit, Certificate: {length = 20, bytes = 0x57bdcc087169af26bd78dfe244a0e7e08acc1d32}, Usage: Sign Decrypt Unwrap 
Valid from: 2018-01-08 10:55:00 +0000 to: 2021-01-06 23:00:00 +0000, SSL trust: YES, X509 trust: YES 

-----BEGIN CERTIFICATE-----
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
-----END CERTIFICATE-----


        org.opensc-project.mac.opensctoken.OpenSCTokenApp.OpenSCToken:7430010009970702:

          #01: Kind: private RSA 1024-bit, Certificate: {length = 20, bytes = 0x4a62be70fac3b0099400d829d12381a76603555e}, Usage: Sign Decrypt Unwrap 
Valid from: 2019-10-16 00:00:00 +0000 to: 2022-10-15 23:59:59 +0000, SSL trust: NO, X509 trust: YES 

-----BEGIN CERTIFICATE-----
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
-----END CERTIFICATE-----

Seems also that the fixed version of OpenSCToken reads the certificate.

[avvRobertoAlma]

And the output of security list-smartcards is the following:

org.opensc-project.mac.opensctoken.OpenSCTokenApp.OpenSCToken:2444024000055028
org.opensc-project.mac.opensctoken.OpenSCTokenApp.OpenSCToken:7430010009970702

[avvRobertoAlma]

I have tried this solution on mac os 10.15.1 and it works! I have built last version of OPENSCTOKEN.

[xaqfan]

sorry ,i build opensc token is failed .
notice me that "framework not found tokend."
how do you build in xcode by step ?

[xaqfan]

Try to install the release candidate of OpenSC 0.20.0. It should install the fixed version of OpenSC Token which should enable full support of CryptoTokenKit on Catalina. There was an issue solved here

which version you have install ? opensc.20.dmg rc4 contains opensc token driver extension.