The University SmartCard has the ability to securely authenticate itself to a remote server by use of a suitable `plugin' for the Netscape/Mozilla browsers. The plugin conforms to the PKCS#11 Cryptoki interface standard so may also be used by other software which can make use of such plugins.
The plugin is available from
http://www.srcf.ucam.org/~rjw57/sc. To use it, one must download both the
libcamcard
and campkcs
tar-balls. Also the PCSC-lite middleware must be
correctly set-up as in the above sections.
Both libcamcard
and campkcs
must be unpacked and installed in the usual
manner (libcamcard
is required for campkcs
and so must be built first).
When you have built campkcs
, a new library will be installed on your system,
libcampkcs11.so.x.x.x
. It is this file which is the PKCS#11 module. Full
installation instructions are available at
http://vertebra.cbcu.cam.ac.uk/pkcs-install.html (except replace the Windows
DLL available there for the libcampkcs11.so.x.x.x
file).
campkcs
adds some extra functionality to the one available from the above site.
Firstly, it supports the newer (layout) Version 1 Univeristy Smartcard. Also Logout and
Change PIN functions are supported. Finally, the module also adds support for multiple
certificates on one card.