open-eid / browser-token-signing Goto Github PK

after building browser-token-signing . I have firefox-token-signing_3.12.0.0_x86.msi and I install it but the extension not loaded in Firefox. there is ok or Something to do after installation.

hello,
I have been using browser-token-signing . it worked in IE 11 but I haven't any information about the certification. Card Reader is Gemalto.
help plz???

Thanks.

Hello. Trying to install this plugin.
But at testing page I receive:

EstEID Plugin initialization failed:
dlopen failed: opensc-pkcs11.so: cannot open shared object file: No such file or directory

Tried to patch Makefile with sed -i "s|opensc-pkcs11.so|/path/to/lib/pkcs11/opensc-pkcs11.so|" Makefile. But that didn't help me anyway.

Hello.
I have been using browser-token-signing for a project related to PDF signing . We did tests on Internet Explorer and Chrome with some degree of success. Everything works ok till the generation of the signature itself - a string of 0's is returned. Only on Firefox we achieved the correct result.This was on version 3.12.3 of the installer available at https://installer.id.ee/ .

how can I change language of plugin to other language(french).
I do this but d'ont work in ie-token-signing.wxs : UpgradeCode="713f9d27-5016-4c6a-bee1-94403255fbd4" Id="*" Language="1036" Version="$(var.VERSION)" Codepage="1252"
(1036 :French - France)

No idea if I should keep it or remove it, what will fail if I remove it.

As it relates to Safari signing only, rename it to "TokenSigningSafariHelper" or something similar.

Hello! I'm Pablo, from Stampery (https://stampery.com). We are implementing file signing using the smart cards and we are missing the ability to set a custom message into the PIN prompt so we can let the user know which file he's inputting the PIN for, since we have the ability to drag and drop multiple files.

The problem arose when we tried to sign 5 files at the time, and using the Estonian eResidency card, it worked, but kept asking the PIN 5 times.

We know it might be hard to make it so once you input the PIN it stays in memory for, let's say, a minute, as well as the security implications this might have, so we thought next that the best thing would be to give the user feedback on which file is being signed and how many are left.

Thanks and congratulations for such understandable code and nice implementations!

It does the installation part when comment in 2 "install" lines.
And it shouldn't be done with sudo, as then it will install it to /root folder.

diff --git a/Makefile b/Makefile
index 51ef0aa..276e034 100644
--- a/Makefile
+++ b/Makefile
@@ -28,8 +28,8 @@ plugin-development:
        MODE_FLAG=-DDEVELOPMENT_MODE make plugin 

 install: plugin
-#      install -d $(HOME)/.mozilla/plugins
-#      install $(OUT) $(HOME)/.mozilla/plugins
+       install -d $(HOME)/.mozilla/plugins
+       install $(OUT) $(HOME)/.mozilla/plugins

 installall: plugin pluginlt pluginlv

diff --git a/README.md b/README.md
index 64413d2..002f3f0 100644
--- a/README.md
+++ b/README.md
@@ -24,7 +24,7 @@

 4. Install

-        sudo make install
+        make install

 5. Execute

Hello! Are you going to support firefox version >51 due to https://www.bleepingcomputer.com/news/software/mozilla-to-drop-support-for-all-npapi-plugins-in-firefox-52-except-flash/?

Any way to install it on fedora?

Hello,
I have a Gemalto Card Reader and I install the browser-token-signing, and after I have the plugin in the browser(IE 11), the information about the certification are undefined.
is there any way to know the exact file that return these  informations (CN,validFrom,validTo..), means location, path ..the cpp file that contains method getcertificateinfo..

• the signature succeed
  -with certmgr.msc I show my token certificates info also in the browser
• cerificate has key usage non-repudiation bit
  

Here is the file log:

2017-06-08 14:26:29.849 CEstEIDIEPluginBHO::SetSite() [EstEIDIEPluginBHO.cpp:40]
2017-06-08 14:26:29.979 CEstEIDIEPluginBHO::SetSite() [EstEIDIEPluginBHO.cpp:40]
2017-06-08 14:26:30.013 CEstEIDIEPluginBHO::SetSite() [EstEIDIEPluginBHO.cpp:40]
2017-06-08 14:26:30.020 CEstEIDIEPluginBHO::get_version() [EstEIDIEPluginBHO.cpp:54]
2017-06-08 14:26:33.394 CEstEIDIEPluginBHO::getCertificate() [EstEIDIEPluginBHO.cpp:111]
2017-06-08 14:26:33.394 CEstEIDIEPluginBHO::isSiteAllowed() [EstEIDIEPluginBHO.cpp:86]
2017-06-08 14:26:33.395 CEstEIDIEPluginBHO::isSiteAllowed() [EstEIDIEPluginBHO.cpp:98] *** Development Mode, all protocols allowed ***
2017-06-08 14:26:33.399 PKCS11Path::atrList() [PKCS11Path.cpp:74] found reader: AKS ifdh 0
2017-06-08 14:26:33.400 PKCS11Path::atrList() [PKCS11Path.cpp:80] SCardConnect ERROR for AKS ifdh 0: 80100069
2017-06-08 14:26:33.400 PKCS11Path::atrList() [PKCS11Path.cpp:74] found reader: AKS ifdh 1
2017-06-08 14:26:33.402 PKCS11Path::atrList() [PKCS11Path.cpp:80] SCardConnect ERROR for AKS ifdh 1: 80100069
2017-06-08 14:26:33.402 PKCS11Path::atrList() [PKCS11Path.cpp:74] found reader: AKS VR 0
2017-06-08 14:26:33.404 PKCS11Path::atrList() [PKCS11Path.cpp:80] SCardConnect ERROR for AKS VR 0: 80100069
2017-06-08 14:26:33.404 PKCS11Path::atrList() [PKCS11Path.cpp:74] found reader: Gemalto USB Smart Card Reader 0
2017-06-08 14:26:33.405 PKCS11Path::atrList() [PKCS11Path.cpp:91] Set ATR = 3B7D96000080318065B0830201F383009000 for reader Gemalto USB Smart Card Reader 0
2017-06-08 14:26:33.406 NativeCertificateSelector::getCert() [NativeCertificateSelector.cpp:11]
2017-06-08 14:26:33.407 NativeCertificateSelector::getCert() [NativeCertificateSelector.cpp:22] Pointer to CERT_STORE 0x0BD97F00
2017-06-08 14:26:34.793 NativeCertificateSelector::getCert() [NativeCertificateSelector.cpp:73] Pointer to CERT_STORE 0x0BD97F00
2017-06-08 14:26:34.793 CEstEIDCertificate::loadCertContexts() [EstEIDCertificate.cpp:49]
2017-06-08 14:26:34.794 CEstEIDCertificate::loadCertContexts() [EstEIDCertificate.cpp:54] certificate binary length = 1604
2017-06-08 14:26:34.794 CEstEIDCertificate::calculateMD5Hash() [EstEIDCertificate.cpp:80]
2017-06-08 14:26:34.795 CEstEIDCertificate::calculateMD5Hash() [EstEIDCertificate.cpp:82] Certificate ID (MD5 hash) is 827a1e41c4ba6a5493d2fda4e6a4d91f
2017-06-08 14:26:34.795 CEstEIDCertificate::binCert2Hex() [EstEIDCertificate.cpp:73]
2017-06-08 14:26:34.796 CEstEIDCertificate::readFromCertContext() [EstEIDCertificate.cpp:41] signCert.data()
2017-06-08 14:26:34.797 CEstEIDIEPluginBHO::clearErrors() [EstEIDIEPluginBHO.cpp:173]
2017-06-08 14:26:34.797 CEstEIDCertificate::get_id() [EstEIDCertificate.cpp:32]
2017-06-08 14:26:34.798 CEstEIDCertificate::get_certificateAsHex() [EstEIDCertificate.cpp:61]
2017-06-08 14:26:36.571 CEstEIDIEPluginBHO::getCertificate() [EstEIDIEPluginBHO.cpp:111]
2017-06-08 14:26:36.571 CEstEIDIEPluginBHO::isSiteAllowed() [EstEIDIEPluginBHO.cpp:86]
2017-06-08 14:26:36.572 CEstEIDIEPluginBHO::isSiteAllowed() [EstEIDIEPluginBHO.cpp:98] *** Development Mode, all protocols allowed ***
2017-06-08 14:26:36.575 PKCS11Path::atrList() [PKCS11Path.cpp:74] found reader: AKS ifdh 0
2017-06-08 14:26:36.576 PKCS11Path::atrList() [PKCS11Path.cpp:80] SCardConnect ERROR for AKS ifdh 0: 80100069
2017-06-08 14:26:36.577 PKCS11Path::atrList() [PKCS11Path.cpp:74] found reader: AKS ifdh 1
2017-06-08 14:26:36.578 PKCS11Path::atrList() [PKCS11Path.cpp:80] SCardConnect ERROR for AKS ifdh 1: 80100069
2017-06-08 14:26:36.578 PKCS11Path::atrList() [PKCS11Path.cpp:74] found reader: AKS VR 0
2017-06-08 14:26:36.580 PKCS11Path::atrList() [PKCS11Path.cpp:80] SCardConnect ERROR for AKS VR 0: 80100069
2017-06-08 14:26:36.580 PKCS11Path::atrList() [PKCS11Path.cpp:74] found reader: Gemalto USB Smart Card Reader 0
2017-06-08 14:26:36.581 PKCS11Path::atrList() [PKCS11Path.cpp:91] Set ATR = 3B7D96000080318065B0830201F383009000 for reader Gemalto USB Smart Card Reader 0
2017-06-08 14:26:36.582 NativeCertificateSelector::getCert() [NativeCertificateSelector.cpp:11]
2017-06-08 14:26:36.583 NativeCertificateSelector::getCert() [NativeCertificateSelector.cpp:22] Pointer to CERT_STORE 0x0BDCC378
2017-06-08 14:26:37.885 NativeCertificateSelector::getCert() [NativeCertificateSelector.cpp:73] Pointer to CERT_STORE 0x0BDCC378
2017-06-08 14:26:37.886 CEstEIDCertificate::loadCertContexts() [EstEIDCertificate.cpp:49]
2017-06-08 14:26:37.886 CEstEIDCertificate::loadCertContexts() [EstEIDCertificate.cpp:54] certificate binary length = 1604
2017-06-08 14:26:37.886 CEstEIDCertificate::calculateMD5Hash() [EstEIDCertificate.cpp:80]
2017-06-08 14:26:37.887 CEstEIDCertificate::calculateMD5Hash() [EstEIDCertificate.cpp:82] Certificate ID (MD5 hash) is 827a1e41c4ba6a5493d2fda4e6a4d91f
2017-06-08 14:26:37.887 CEstEIDCertificate::binCert2Hex() [EstEIDCertificate.cpp:73]
2017-06-08 14:26:37.888 CEstEIDCertificate::readFromCertContext() [EstEIDCertificate.cpp:41] signCert.data()
2017-06-08 14:26:37.888 CEstEIDIEPluginBHO::clearErrors() [EstEIDIEPluginBHO.cpp:173]
2017-06-08 14:26:37.888 CEstEIDCertificate::get_id() [EstEIDCertificate.cpp:32]
2017-06-08 14:26:37.889 CEstEIDIEPluginBHO::sign() [EstEIDIEPluginBHO.cpp:137]
2017-06-08 14:26:37.889 CEstEIDIEPluginBHO::isSiteAllowed() [EstEIDIEPluginBHO.cpp:86]
2017-06-08 14:26:37.889 CEstEIDIEPluginBHO::isSiteAllowed() [EstEIDIEPluginBHO.cpp:98] *** Development Mode, all protocols allowed ***
2017-06-08 14:26:37.892 PKCS11Path::atrList() [PKCS11Path.cpp:74] found reader: AKS ifdh 0
2017-06-08 14:26:37.893 PKCS11Path::atrList() [PKCS11Path.cpp:80] SCardConnect ERROR for AKS ifdh 0: 80100069
2017-06-08 14:26:37.894 PKCS11Path::atrList() [PKCS11Path.cpp:74] found reader: AKS ifdh 1
2017-06-08 14:26:37.895 PKCS11Path::atrList() [PKCS11Path.cpp:80] SCardConnect ERROR for AKS ifdh 1: 80100069
2017-06-08 14:26:37.897 PKCS11Path::atrList() [PKCS11Path.cpp:74] found reader: AKS VR 0
2017-06-08 14:26:37.899 PKCS11Path::atrList() [PKCS11Path.cpp:80] SCardConnect ERROR for AKS VR 0: 80100069
2017-06-08 14:26:37.899 PKCS11Path::atrList() [PKCS11Path.cpp:74] found reader: Gemalto USB Smart Card Reader 0
2017-06-08 14:26:37.900 PKCS11Path::atrList() [PKCS11Path.cpp:91] Set ATR = 3B7D96000080318065B0830201F383009000 for reader Gemalto USB Smart Card Reader 0
2017-06-08 14:26:37.901 SignerFactory::certificateMatchesId() [SignerFactory.cpp:55] Cert match check result: matches
2017-06-08 14:26:37.902 CngCapiSigner::sign() [CngCapiSigner.cpp:34] Signing with hash: 26fd6dbee37c55c14af480f00daff8817b61967e, with certId: 827a1e41c4ba6a5493d2fda4e6a4d91f
2017-06-08 14:26:38.417 CngCapiSigner::sign() [CngCapiSigner.cpp:83] Using CNG
2017-06-08 14:26:39.355 CEstEIDIEPluginBHO::clearErrors() [EstEIDIEPluginBHO.cpp:173]
2017-06-08 14:26:39.356 CEstEIDIEPluginBHO::sign() [EstEIDIEPluginBHO.cpp:148] Signing ended

doesn't work in internet Explorer windows 7 but it's ok windows 10 . there is any problem with windows7 or No

Following the readme on OSX the make build fails with the error below:

Ld build/esteid-plugin.build/Release/esteidfirefoxplugin.build/Objects-normal/i386/esteidfirefoxplugin normal i386
    cd /Users/Andres/Documents/Projects/browser-token-signing
    export MACOSX_DEPLOYMENT_TARGET=10.9
    /Applications/Xcode.app/Contents/Developer/Toolchains/XcodeDefault.xctoolchain/usr/bin/clang -arch i386 -bundle -isysroot /Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.11.sdk -L/Users/Andres/Documents/Projects/browser-token-signing/build/Release -L/Users/Andres/Documents/Projects/browser-token-signing/target/lib -F/Users/Andres/Documents/Projects/browser-token-signing/build/Release -filelist /Users/Andres/Documents/Projects/browser-token-signing/build/esteid-plugin.build/Release/esteidfirefoxplugin.build/Objects-normal/i386/esteidfirefoxplugin.LinkFileList -mmacosx-version-min=10.9 -fobjc-link-runtime -lcrypto -framework PCSC -framework Cocoa -Xlinker -dependency_info -Xlinker /Users/Andres/Documents/Projects/browser-token-signing/build/esteid-plugin.build/Release/esteidfirefoxplugin.build/Objects-normal/i386/esteidfirefoxplugin_dependency_info.dat -o /Users/Andres/Documents/Projects/browser-token-signing/build/esteid-plugin.build/Release/esteidfirefoxplugin.build/Objects-normal/i386/esteidfirefoxplugin
ld: warning: ignoring file /Users/Andres/Documents/Projects/browser-token-signing/target/lib/libcrypto.a, file was built for archive which is not the architecture being linked (i386): /Users/Andres/Documents/Projects/browser-token-signing/target/lib/libcrypto.a
Undefined symbols for architecture i386:
  "_ASN1_BIT_STRING_free", referenced from:
      _EstEID_loadCertInfoEntries in esteid_certinfo.o
  "_ASN1_GENERALIZEDTIME_free", referenced from:
      _EstEID_ASN1_TIME_toString in esteid_certinfo.o
  "_ASN1_INTEGER_get", referenced from:
      _EstEID_loadCertInfoEntries in esteid_certinfo.o
  "_ASN1_STRING_to_UTF8", referenced from:
      _EstEID_loadCertEntries in esteid_certinfo.o
  "_ASN1_TIME_to_generalizedtime", referenced from:
      _EstEID_ASN1_TIME_toString in esteid_certinfo.o
  "_BIO_ctrl", referenced from:
      _EstEID_loadCertInfoEntries in esteid_certinfo.o
      _EstEID_base64Encode in esteid_sign.o
  "_BIO_f_base64", referenced from:
      _EstEID_base64Encode in esteid_sign.o
  "_BIO_free", referenced from:
      _EstEID_loadCertInfoEntries in esteid_certinfo.o
  "_BIO_free_all", referenced from:
      _EstEID_base64Encode in esteid_sign.o
  "_BIO_new", referenced from:
      _EstEID_loadCertInfoEntries in esteid_certinfo.o
      _EstEID_base64Encode in esteid_sign.o
  "_BIO_push", referenced from:
      _EstEID_base64Encode in esteid_sign.o
  "_BIO_s_mem", referenced from:
      _EstEID_loadCertInfoEntries in esteid_certinfo.o
      _EstEID_base64Encode in esteid_sign.o
  "_BIO_write", referenced from:
      _EstEID_base64Encode in esteid_sign.o
  "_MD5", referenced from:
      _EstEID_getCertHash in esteid_certinfo.o
  "_OBJ_obj2txt", referenced from:
      _EstEID_loadCertEntries in esteid_certinfo.o
  "_PEM_write_bio_X509", referenced from:
      _EstEID_loadCertInfoEntries in esteid_certinfo.o
  "_X509_NAME_entry_count", referenced from:
      _EstEID_loadCertEntries in esteid_certinfo.o
  "_X509_NAME_get_entry", referenced from:
      _EstEID_loadCertEntries in esteid_certinfo.o
  "_X509_get_ext_d2i", referenced from:
      _EstEID_loadCertInfoEntries in esteid_certinfo.o
  "_X509_get_issuer_name", referenced from:
      _EstEID_loadCertInfoEntries in esteid_certinfo.o
  "_X509_get_serialNumber", referenced from:
      _EstEID_loadCertInfoEntries in esteid_certinfo.o
  "_X509_get_subject_name", referenced from:
      _EstEID_loadCertInfoEntries in esteid_certinfo.o
  "_d2i_X509", referenced from:
      _EstEID_loadCertInfoEntries in esteid_certinfo.o
ld: symbol(s) not found for architecture i386
clang: error: linker command failed with exit code 1 (use -v to see invocation)

** INSTALL FAILED **


The following build commands failed:
	Ld build/esteid-plugin.build/Release/esteidfirefoxplugin.build/Objects-normal/i386/esteidfirefoxplugin normal i386
(1 failure)
make[1]: *** [/Users/Andres/Documents/Projects/browser-token-signing/tmp/Library/Internet Plug-Ins/esteidfirefoxplugin.bundle] Error 65
make: *** [build] Error 2

System specs:

OS: Mac OS 10.10.5 (64/x86_64)
Kernel: Darwin 14.5.0 Darwin Kernel Version 14.5.0: Mon Jan 11 18:48:35 PST 2016; root:xnu-2782.50.2~1/RELEASE_X86_64 x86_64

I have tested browser-token-signing and hwcrypto in Debian GNU/Linux 7.8 (64 bits) and it works excellent.

For Linux boxes the plugin uses opensc-pkcs11.so from its standard location:

#define LOAD_LIBRARY void *handle = dlopen("opensc-pkcs11.so", RTLD_NOW)

Some smart cards and USB token have a specific PKCS#11 implementation in a different file, for instance a Gemalto smart card and an Aladdin eToken PRO use the following files, respectively:

/usr/lib/ClassicClient/libgclib-1.8.0.so
/usr/lib64/libeTPkcs11.so

In these cases the plugin (through getCertificate() function) will not find any certificate because it is looking for opensc-pkcs11.so file.

Thinking in a use case in which a user does not know how to make a symbolic link from opensc-pkcs11.so to the hardware's PKCS#11 implementation, how could I set the path to the PKCS#11 implementation in the plugin dynamically?.

Could you please give me any advice to resolve this situation?

Best Regards

I can not generate the .msi file what is the problem exactly the wix file is needed for its generation since in browser token signing there is a wix file

Cannot update software because cannot uninstall previous version because .msi file is missing.

how can I change installer language to French I add French ressources in this one
https://github.com/open-eid/browser-token-signing/blob/ebb0ac37c3d694ff6892d27b46812b1b9ae14212/ie/esteid-plugin-ie.rc . is there any other one file to change to work installer in French???

// French resources

#if !defined(AFX_RESOURCE_DLL) || defined(AFX_TARG_FRA)
LANGUAGE LANG_FRENCH, SUBLANG_FRENCH
#pragma code_page(1252)

#ifdef APSTUDIO_INVOKED
/////////////////////////////////////////////////////////////////////////////
//
// TEXTINCLUDE
//

1 TEXTINCLUDE
BEGIN
"resource.h\0"
END

2 TEXTINCLUDE
BEGIN
"#ifndef APSTUDIO_INVOKED\r\n"
"#include ""targetver.h""\r\n"
"#endif\r\n"
"#include ""winres.h""\r\n"
"\0"
END

3 TEXTINCLUDE
BEGIN
"1 TYPELIB ""esteidpluginie.tlb""\r\n"
"\0"
END

#endif // APSTUDIO_INVOKED

/////////////////////////////////////////////////////////////////////////////
//
// Version
//

VS_VERSION_INFO VERSIONINFO
FILEVERSION MAJOR_VER,MINOR_VER,RELEASE_VER,BUILD_VER
PRODUCTVERSION MAJOR_VER,MINOR_VER,RELEASE_VER,BUILD_VER
FILEFLAGSMASK 0x3fL
#ifdef _DEBUG
FILEFLAGS 0x1L
#else
FILEFLAGS 0x0L
#endif
FILEOS 0x4L
FILETYPE 0x2L
FILESUBTYPE 0x0L
BEGIN
BLOCK "StringFileInfo"
BEGIN
BLOCK "040904e4"
BEGIN
VALUE "CompanyName", ""
VALUE "FileDescription", "tn-Sign plugin"
VALUE "FileVersion", VER_STR(MAJOR_VER.MINOR_VER.RELEASE_VER.BUILD_VER)
VALUE "LegalCopyright", "(c)"
VALUE "InternalName", "tn-Sign-plugin-ie.dll"
VALUE "OriginalFilename", "tn-Sign-plugin-ie.dll"
VALUE "ProductName", "tn-Sign plugin"
VALUE "ProductVersion", VER_STR(MAJOR_VER.MINOR_VER.RELEASE_VER.BUILD_VER)
END
END
BLOCK "VarFileInfo"
BEGIN
VALUE "Translation", 0x40c, 1200
END
END

/////////////////////////////////////////////////////////////////////////////
//
// REGISTRY
//

IDR_ESTEIDPLUGINIE REGISTRY "esteid-plugin-ie.rgs"
IDR_ESTEIDIEPLUGINBHO REGISTRY "EstEIDIEPluginBHO.rgs"
IDR_ESTEIDCERTIFICATE REGISTRY "EstEIDCertificate.rgs"
#endif // French resources

how can I get the hash in the plugin test.html
I do

var hash = plugin().getHash();//but d'ont work
    try {
      var id = cert.id;
      document.getElementById('id').innerHTML = id;
      var signature = plugin().sign(id, hash, { language: 'et' }); // , { language: 'et' }
      var s = "";
      for (var i = 0; i < signature.length; i += 64) {
        s += signature.substr(i, 64) + "\n";
      }
      document.getElementById('signature').innerHTML = s;
	  var hex = cert.certificateAsHex; 
        var s = "";
        if (hex) for (var i = 0; i < hex.length; i += 64) s += hex.substr(i, 64) + "\n";

by default in the plugintest .hml : we have code html:

hash: <input type="text" size="80" maxlength="128" id="hash" value="26fd6dbee37c55c14af480f00daff8817b61967e"> 
 var hash = document.getElementById('hash').value; .`

I need to do like this one

I do crypt (hash) with javascript :

var md = forge.md.sha512.sha256.create();
md.update(chaineCrypt);
var sha512_256 = md.digest().toHex();
console.log(sha512_256);
	  var cert = plugin().getCertificate();
    document.getElementById('signature').innerHTML = '';
    var hash = sha256.toString();
    try {
      var id = cert.id;
      document.getElementById('id').innerHTML = id;
      var signature = plugin().sign(id, hash, { language: 'et' }); // , { language: 'et' }
      var s = "";

I have the hash in esteidLog :

2017-06-29 13:28:32.429 SignerFactory::certificateMatchesId() [SignerFactory.cpp:55] Cert match check result: matches
2017-06-29 13:28:32.429 CngCapiSigner::sign() [CngCapiSigner.cpp:34] Signing with hash: 48b2769a272c373b8989d353254429ff0a638de1347a227b6e21756c1c6cae23, with certId: 827a1e41c4ba6a5493d2fda4e6a4d91f
2017-06-29 13:28:32.703 CngCapiSigner::sign() [CngCapiSigner.cpp:83] Using 
```CNG

but now I need to return hash from plugin

Hi, I work with tokens using the safenet middleware (aka Aladdin tokens). I found it works great on FF and IE on Windows.
Unfortunately, my certificate dialog stays empty in OSX.
The safenet client is installed and the certificates are visible in it. The plugin is enabled in safari, but unfortunately no certificates are shown, a blank list pops up.
I use the latest version as available on id.ee.

I'd like to verify that the Generated signature is valid or not. is there any tools to verify the Generated signature online , a function or other way????

how can I get date validFrom of certificat in code C++