FM / opensc

/snap/core24/1643/usr/share/opensc

Name	Size	Mode	Actions
asepcos.profile	2596	0644	edit dl rm
authentic.profile	2925	0644	edit dl rm
cardos.profile	2833	0644	edit dl rm
cyberflex.profile	2919	0644	edit dl rm
entersafe.profile	3888	0644	edit dl rm
epass2003.profile	4276	0644	edit dl rm
flex.profile	3163	0644	edit dl rm
gids.profile	230	0644	edit dl rm
iasecc.profile	2906	0644	edit dl rm
iasecc_admin_eid.profile	5030	0644	edit dl rm
iasecc_generic_oberthur.profile	4666	0644	edit dl rm
iasecc_generic_pki.profile	5015	0644	edit dl rm
ias_adele_admin1.profile	5041	0644	edit dl rm
ias_adele_admin2.profile	5014	0644	edit dl rm
ias_adele_common.profile	4959	0644	edit dl rm
isoApplet.profile	3003	0644	edit dl rm
muscle.profile	3461	0644	edit dl rm
myeid.profile	6802	0644	edit dl rm
oberthur.profile	4462	0644	edit dl rm
openpgp.profile	1890	0644	edit dl rm
pkcs15.profile	3957	0644	edit dl rm
rutoken.profile	5506	0644	edit dl rm
rutoken_ecp.profile	6211	0644	edit dl rm
rutoken_lite.profile	5710	0644	edit dl rm
sc-hsm.profile	400	0644	edit dl rm
setcos.profile	3791	0644	edit dl rm
starcos.profile	2752	0644	edit dl rm

Edit: /snap/core24/1643/usr/share/opensc/ias_adele_admin2.profile (5014B)

#
# PKCS15 r/w profile for Oberthur cards
#
cardinfo {
    label       = "IAS";
    manufacturer    = "IAS Gemalto";

max-pin-length  = 4;
    min-pin-length  = 4;
    pin-encoding    = ascii-numeric;
    pin-pad-char    = 0xFF;

# Delete or not the public key when incorporating the
    # corresponding certificate.
    keep-public-key        = yes;   # yes/no 
}

pkcs15 {
    # Put certificates into the CDF itself?
    direct-certificates    = no;
    # Put the DF length into the ODF file?
    encode-df-length    = no;
    # Have a lastUpdate field in the EF(TokenInfo)?
    do-last-update        = yes;
}

option ecc {
    macros {
        odf-size        = 96;
        aodf-size       = 300;
        cdf-size        = 3000;
        prkdf-size      = 6700;
        pukdf-size      = 2300;
        dodf-size       = 3000;
        skdf-size       = 3000;
    }
}

# Define reasonable limits for PINs and PUK
# Note that we do not set a file path or reference
# here; that is done dynamically.
PIN user-pin {
    attempts        = 5;
    max-length      = 4;
    min-length      = 4;
    flags           = 0x10; # initialized
    reference       = 1;
}
PIN so-pin {
    auth-id     = FF;
    attempts    = 5;
    max-length  = 4;
    min-length  = 4;
    flags       = 0xB2;
    reference   = 2
}

# Additional filesystem info.
# This is added to the file system info specified in the
# main profile.
filesystem {
    DF MF {
        ACL     = *=CHV4;
        path    = 3F00;
        type    = DF;

# This is the DIR file
        EF DIR {
            type    = EF;
            file-id = 2F00;
            size    = 128;
            acl     = *=NONE;
        }

# Here comes the application DF

DF PKCS15-AppDF {
            type    = DF;
            aid     = E8:28:BD:08:0F:D2:50:00:00:04:02:01;
            acl     = *=NONE;
            size    = 5000;

EF PKCS15-ODF {
                file-id = 5031;
                size    = 96;
                ACL     = WRITE=SCBx17, UPDATE=SCBx17, READ=NONE;
            }

EF PKCS15-TokenInfo {
                file-id = 5032;
                ACL     = WRITE=SCBx17, UPDATE=SCBx17, READ=NONE;
            }

EF PKCS15-AODF {
                file-id = 7001;
                size    = 300;
                ACL     = WRITE=SCBx17, UPDATE=SCBx17, READ=NONE;
            }

EF PKCS15-PrKDF {
                file-id = 7002;
                size    = 6700;
                ACL     = WRITE=SCBx17, UPDATE=SCBx17, READ=NONE;
            }

EF PKCS15-PuKDF {
                file-id = 7004;
                size    = 2300;
                ACL     = WRITE=SCBx17, UPDATE=SCBx17, READ=NONE;
            }

EF PKCS15-SKDF {
                file-id = 7003;
                size    = 3000;
                ACL     = WRITE=SCBx17, UPDATE=SCBx17, READ=NONE;
            }

EF PKCS15-CDF {
                file-id = 7005;
                size    = 3000;
                ACL     = WRITE=SCBx17, UPDATE=SCBx17, READ=NONE;
            }

EF PKCS15-DODF {
                file-id = 7006;
                size    = 3000;
                ACL     = WRITE=SCBx17, UPDATE=SCBx17, READ=NONE;
            }
            
            template key-domain {
                # Private RSA keys
                BSO private-key {
                    ACL     = *=NEVER;
                    ACL     = SIGN=SCBx17, AUTHENTICATE=SCBx17, DECIPHER=SCBx17, GENERATE=SCBx17, UPDATE=SCBx17, READ=NONE;
                }

# Private DES keys
                BSO private-des {
                    size    = 24;  # 192 bits
                    # READ acl used instead of DECIPHER/ENCIPHER/CHECKSUM
                }

# Private data
                EF  private-data {
                    file-id = F000;
                    size    = 36;
                    ACL     = *=NONE;
                    ACL     = WRITE=SCBx17, UPDATE=SCBx17, READ=SCBx17;
                }

# Certificate
                EF certificate {
                    # for the profiles 'ADELE Admin. 1 & 2'
                    # file-id: auth: A001; sign: A002; encr: A003;
                    file-id = B000;
                    ACL     = *=NEVER;
                    ACL     = UPDATE=SCBx17, READ=NONE, DELETE=NONE;
                }

#Public Key
                BSO public-key {
                    ACL = *=NEVER;
                    ACL = AUTHENTICATE=SCBx17, GENERATE=SCBx17, UPDATE=SCBx17, READ=NONE;
                }

# Public DES keys
                BSO public-des {
                    size    = 24;  # 192 bits
                    ACL     = *=NONE;
                }

# Public data
                EF  public-data {
                    file-id = D000;
                    ACL     = *=NONE;
                    ACL     = WRITE=SCBx17, UPDATE=SCBx17, DELETE=NONE;
                }
            }
        }
    }
}

cmd: