martinpaljak / osx-ccid-installer

Easy-to-use (graphical) open source CCID driver installer for OSX El Capitan (10.11) / macOS Sierra (10.12)

Hi there 👋

This is Martin from 🇪🇪 Estonia 🇪🇺. Every now and then I push code to Github, that scratches my own itches (remembering Kerckhoff's principle!).

Most probably you're here because of the "open source javacard software development toolkit" that consists of

• 🌐 GlobalPlatformPro
• 🐜 ant-javacard

🛜 NFC/NDEF and 🔑 FIDO/WebAuthn are topics where you can expect developments in 2024.

There are also historical bits and pieces related to generic smart cards (PC/SC, CCID) and crypto with Java/JavaScript/PKCS#11, and Estonian eID and identity (OpenID etc) in general.

When it comes to Estonian eID, most of what I worked on has been continued by others: @OpenSC (open source PKCS#11 and native platform crypto drivers for smart cards), @web-eid (modern WebExtensions based authentication and signing for desktop browsers) and @open-eid (ages ago I pushed Estonia to publish (most of) it's eID client software as open source)

Feel free to 💬 book a call if you have any questions or ongoing projects in these domains or to 🙏 sponsor my open source work!

News

• March 2024: ant-javacard now supports the latest v3.2.0 JavaCard SDK
• August 2023: ant-javacard got a new release after almost 2 years. Groundwork for a smoother and more stable build toolkit and new release for GlobalPlatformPro as well.
• July 2023: "NFC tags for PC-s" got a rewrite and first pretty release. Have a look!
• April 2023: GlobalPlatformPro received a small recognition from Google Open Source via a Peer Bonus :) (thx @kt)

osx-ccid-installer's Issues

Please sign release v0.14

There is no GPG signature from @martinpaljak on https://github.com/martinpaljak/osx-ccid-installer/releases/tag/v0.14

Update CCID to 1.4.31

make -C osx-ccid-installer does not work

Mac OS X 10.11.4, Xcode-7.3.1, Macports-2.3.4 (whatever's the current).

Also, the README.md there says

• To build yourself (requires XCode plus libtool, autoconf and automake from Homebrew/MacPorts/Fink)

  git clone --recursive https://github.com/martinpaljak/osx-ccid-installer
  make -C osx-ccid-installer

It does not work (listing after make command without parameters was executed):

$ ls -l
total 744
drwxr-xr-x  47 ur20980  MITLL\Domain Users    1598 May 20 09:58 CCID
-rw-r--r--   1 ur20980  MITLL\Domain Users     791 May 20 09:55 Distribution.xml
-rw-r--r--   1 ur20980  MITLL\Domain Users      24 May 20 09:55 Makefile
-rw-r--r--   1 ur20980  MITLL\Domain Users    1004 May 20 09:55 README.md
drwxr-xr-x   4 ur20980  MITLL\Domain Users     136 May 20 09:58 build
-rw-r--r--   1 ur20980  MITLL\Domain Users      45 May 20 09:58 ccid-1.4.23-7-ge039760.tar.gz
-rw-r--r--@  1 ur20980  MITLL\Domain Users  133393 May 20 09:58 ccid-installer.dmg
-rw-r--r--   1 ur20980  MITLL\Domain Users  107753 May 20 09:58 ccid-installer.pkg
drwxr-xr-x   3 ur20980  MITLL\Domain Users     102 May 20 09:55 ccid-patches
-rw-r--r--   1 ur20980  MITLL\Domain Users  103225 May 20 09:58 ifd-ccid.pkg
drwxr-xr-x  48 ur20980  MITLL\Domain Users    1632 May 20 09:58 libusb
-rwxr-xr-x   1 ur20980  MITLL\Domain Users    1760 May 20 09:55 package.sh
drwxr-xr-x   4 ur20980  MITLL\Domain Users     136 May 20 09:55 resources
drwxr-xr-x   3 ur20980  MITLL\Domain Users     102 May 20 09:55 scripts
drwxr-xr-x   3 ur20980  MITLL\Domain Users     102 May 20 09:58 target
-rw-r--r--   1 ur20980  MITLL\Domain Users    4742 May 20 09:58 uninstall.pkg
drwxr-xr-x   3 ur20980  MITLL\Domain Users     102 May 20 09:55 uninstaller-scripts
$ make -C osx-ccid-installer
make: *** osx-ccid-installer: No such file or directory.  Stop.
$ 

make without parameters works and produces the desired/expected results. I think README.md needs to be corrected. And if would help to mention there which of the two (or both) generated packages need to be installed, and in what order (if both are needed).

MacOS 10.11.6?

Hello. What is the latest status on MacOS 10.11.6? I am getting this with up-to-date @Nitrokey device:

gpg --card-status
gpg: selecting openpgp failed: Operation not supported by device
gpg: OpenPGP card not available: Operation not supported by device

Any suggestions?

This might be useful:

ls -al /usr/libexec/SmartCardServices/drivers/ifd-ccid.bundle/Contents/MacOS/
total 344
drwxr-xr-x  5 root  wheel     170 Sep  5  2016 .
drwxr-xr-x  5 root  wheel     170 Sep  5  2016 ..
lrwxr-xr-x  1 root  wheel      20 Sep  5  2016 libccid.dylib -> libccid.dylib.1.4.21
-rwxr-xr-x  1 root  wheel  165888 Sep 17  2015 libccid.dylib.1.4.14
-rwxr-xr-x  1 root  wheel  166096 Jul  9  2016 libccid.dylib.1.4.21

Gemalto IDBridge CT710 doesn't work

Latest 10.10.3 on MacBook Pro (Retina, 13-inch, Mid 2014):

May 11 14:23:05 masin.local com.apple.SecurityServer[77]: Token reader Gemalto Ezio Shield inserted into system
May 11 14:23:05 masin.local com.apple.SecurityServer[77]: reader Gemalto Ezio Shield: state changed 0 -> 18
May 11 14:23:05 masin kernel[0]: AppleUSBMultitouchDriver::message - kIOUSBMessagePortHasBeenReset.
May 11 14:23:05 masin kernel[0]: AppleUSBMultitouchDriver::checkStatus - received Status Packet, Payload 2: device was reinitialized
May 11 14:23:05 masin.local hidd[96]: MultitouchHID: device bootloaded
May 11 14:23:32 masin.local com.apple.SecurityServer[77]: reader Gemalto Ezio Shield: state changed 16 -> 34
May 11 14:23:32 masin.local com.apple.ifdreader[288]: 00000658 ccid_usb.c:786:ReadUSB() read failed (20/13): -8 LIBUSB_ERROR_OVERFLOW
May 11 14:23:32 masin.local com.apple.ifdreader[288]: 00162112 ccid_usb.c:786:ReadUSB() read failed (20/13): -9 LIBUSB_ERROR_PIPE
May 11 14:23:33 masin.local com.apple.SecurityServer[77]: token in reader Gemalto Ezio Shield cannot be used (error 229)
May 11 14:23:33 masin.local com.apple.SecurityServer[77]: reader Gemalto Ezio Shield: state changed 32 -> 18
May 11 14:23:33 masin.local com.apple.ifdreader[288]: 00316889 ccid_usb.c:786:ReadUSB() read failed (20/13): -9 LIBUSB_ERROR_PIPE
May 11 14:23:33 masin.local com.apple.ifdreader[288]: 00303499 ccid_usb.c:786:ReadUSB() read failed (20/13): -9 LIBUSB_ERROR_PIPE
May 11 14:23:33 masin.local com.apple.ifdreader[288]: 00322127 ccid_usb.c:786:ReadUSB() read failed (20/13): -9 LIBUSB_ERROR_PIPE
May 11 14:23:34 masin.local com.apple.ifdreader[288]: 00252182 ccid_usb.c:786:ReadUSB() read failed (20/13): -9 LIBUSB_ERROR_PIPE

Installation Errors

Hey guys!

After installing some GNU tools via Brew (i.e autoconf, automake, libtool), I cloned and ran the make as directed.

Getting pretty far in the installation, I ran into the following error:

checking for ar... ar
checking the archiver (ar) interface... ar
./configure: line 4641: PKG_PROG_PKG_CONFIG: command not found
./configure: line 4645: syntax error near unexpected token `libpcsclite,'
./configure: line 4645: `PKG_CHECK_EXISTS(libpcsclite,'
+ r=2
+ rm -f src/Info.plist
+ exit 2
make: *** [/Users/walt/Downloads/osx-ccid-installer/target/usr/local/libexec/SmartCardServices/drivers/ifd-ccid.bundle] Error 2

Any ideas on how I can go about resolving this?

Working in macOS version 10.13.5 (17F77)

Added VID:PID:Friendly name but no joy

I have OSX 10.12 on a MacBook Pro. Installed the driver, added my device vid, pid and friendly name to the Info.plist. After reboot run pcsctest but it does not detect my device.

SSH authentication using NitroKeyPro

I have been trying to get my NitroKey (OpenPGP Smartcard) to work for SSH authentication
on OSX. Operation for all other applications works fine.

gpg --card-status lists the smartcard just fine but using

ssh <username>@<host>

yields:

Permission denied (publickey,gssapi-keyex,gssapi-with-mic).

Unsure if a bug with the driver.

Mac OS X 10.11 El Capitan

Hi,

are there plans to update the installer in order to run it on 10.11?

thanks!

br,
gernot

Building installer

I have the following installed as directed: XCode plus libtool, autoconf, automake and pkg-config

autoconf, automake and pkg-config were installed using brew from the command prompt. XCode and libtool were already installed.

I got the source tree and run make using the command in the instructions:

git clone --recursive https://github.com/martinpaljak/osx-ccid-installer
make -C osx-ccid-installer

However, the make fails. I know next to nothing about the build tools on OSX which probably why I don't know how to resolve the following issues quickly. I am hoping for some pointers or a fix if one is required. Here is the build output:

$ make -C osx-ccid-installer/
git submodule foreach git clean -dfx
Entering 'CCID'
Entering 'libusb'
Removing INSTALL
Removing Makefile.in
Removing aclocal.m4
Removing autom4te.cache/
Removing compile
Removing config.h.in
Removing configure
Removing depcomp
Removing doc/Makefile.in
Removing examples/Makefile.in
Removing install-sh
Removing m4/
Removing missing
git submodule foreach git reset --hard
Entering 'CCID'
HEAD is now at 3da71e2 Release 1.4.25
Entering 'libusb'
HEAD is now at 09e75e9 Release 1.0.21
rm -rf target tmp *.pkg *.dmg
(cd libusb
&& ./autogen.sh
&& ./configure --prefix=/Users/wrcgator/Downloads/osx-ccid-installer-master/osx-ccid-installer/tmp --disable-dependency-tracking --enable-static --disable-shared
&& /Applications/Xcode.app/Contents/Developer/usr/bin/make
&& /Applications/Xcode.app/Contents/Developer/usr/bin/make install
)
autoreconf: Entering directory `.'
autoreconf: configure.ac: not using Gettext
autoreconf: running: aclocal --force -I m4
autoreconf: configure.ac: tracing
autoreconf: configure.ac: not using Libtool
autoreconf: running: /usr/local/Cellar/autoconf/2.69/bin/autoconf --force
autoreconf: running: /usr/local/Cellar/autoconf/2.69/bin/autoheader --force
autoreconf: running: automake --add-missing --copy --force-missing
configure.ac:37: installing './compile'
configure.ac:29: installing './install-sh'
configure.ac:29: installing './missing'
Makefile.am: installing './INSTALL'
examples/Makefile.am: installing './depcomp'
libusb/Makefile.am:5: error: Libtool library used but 'LIBTOOL' is undefined
libusb/Makefile.am:5: The usual way to define 'LIBTOOL' is to add 'LT_INIT'
libusb/Makefile.am:5: to 'configure.ac' and run 'aclocal' and 'autoconf' again.
libusb/Makefile.am:5: If 'LT_INIT' is in 'configure.ac', make sure
libusb/Makefile.am:5: its definition is in aclocal's search path.
autoreconf: automake failed with exit status: 1
make: *** [/Users/wrcgator/Downloads/osx-ccid-installer-master/osx-ccid-installer/tmp/lib/libusb-1.0.a] Error 1

Make a PR for CCID README.md

So that it would look nice on Github. And contain a link to the installer.