Post

Replies

Boosts

Views

Activity

Reply to Client certificate authentication using CTK extension in iOS device
@eskimo I am developing a CTK extension in order to access Client Authentication SSL websites with certificates installed on smartcards. My reader is a lightening port reader. Here are few questions: What is difference between Smartcard extension and Persistent Token extension? Which one I should use? Since my smartcard reader has lightening port, curious to know if EAAccessory is allowed to be used in CTK extension? https://developer.apple.com/forums/thread/111691?answerId=342707022 says EAAccessory is not working inside app extension. Kindly confirm
Jan ’24
Reply to Client certificate authentication using CTK extension in iOS device
Thanks for your support. Could you please clarify the following doubts. We want to support client certificate authentication using lightning port smart card readers. Could you please let me know if there are any advantages in using smart card token extension here? Does smartcard extension do lightning port smart card reader card insertion and detection? Or we have to use a persistent token extension as we are already doing? One thing we want to support is the automatic insertion of certificates present in the smartcard to keychain configuration whenever the smart card is detected and remove them once the card is removed. This will avoid the necessity of users having to manually add the certificate to configuration which they can later select during client certification authentication. Could you please let me know which token extension is suitable for this? Does the smartcard token extension do smartcard detection itself for lightning port readers? Or if we have to do the smartcard detection ourselves using the vendor smartcard SDK in CTK extension, then what is the life cycle of CTK extension? Is it launched when the device boots and will be running as a background process? You also mentioned another approach of routing the request from CTK extension to the app using unix domain sockets. Is this the recommended way instead of integrating vendor smartcard SDK in CTK itself?  Also could you please let me know if this https://twocanoes.com/knowledge-base/fb9876464-cryptotokenkit-extension-stops-working-when-replacing-container-app-until-reboot/ issue will be fixed in coming releases. Thanks.
Jan ’24