Home

Awesome

docker + javacard = why ?!

Why you ask? Well I don't know either.

But the main reasons are I needed it and:

This repoository takes all the dependencies needed to build a HelloWorld applet with the ant or the gradle toolchain.

It's meant for local development by mapping the applets sourcecode into the running containers but is also capable to run in a typical CI/CD pipeline.

Just map the applet into /applet and run your tests.

Overview

docker container overview

the docker compose way

This repo is build around docker compose to easily handle multiple docker images and build files sharing dependencies.

To start it jsut run start any service defined in docker-compose.yml and the appropriate image should automatically be build.

ant

Start container:

Run tests:

javacard@4618e2d2a546:/applet$ ant test
Buildfile: /applet/build.xml
...
BUILD SUCCESSFUL
Total time: 1 second

Build applet:

javacard@d7825490cfe0:/applet$ ant applet
Buildfile: /applet/build.xml
      [cap] CAP saved to /applet/build/helloworld.cap
...
BUILD SUCCESSFUL
Total time: 1 second

gradle

Start container:

Run tests:

gradle@8aa816b693a5:/applet/helloworld$ gradle test
...
BUILD SUCCESSFUL in 2s
3 actionable tasks: 2 executed

Build applet:

gradle@3e496b0ab649:/applet$ gradle buildjavacard
...
BUILD SUCCESSFUL in 3s
1 actionable task: 1 executed

the docker way

When you don't want to use fancy docker-compose.yml and need barebones docker containers just use the steps below.

build

If you want you can build the images by hand via

For ant:

For gradle:

run

For example (keep in mind to map your volumes manually now)

USB image to install applets to physical card

To finally install the build cap file on a physical card you can use the javacard-usb docker image.

In the docker-compose.yml maps the hosts systems /dev/bus/usb into the container so the cardreader can be accessed.

List cardreaders with pcsc_scan

root@55557e33ca3f:/applet# pcsc_scan 
Using reader plug'n play mechanism
Scanning present readers...
0: Alcor Micro AU9540 00 00
 
Sun Jun  5 18:14:09 2022
 Reader 0: Alcor Micro AU9540 00 00
  Event number: 1
  Card state: Card removed,

Query the card with globalplatformpro

root@a14755c4d73f:/javacard# java -jar gp.jar -list
Warning: no keys given, using default test key 404142434445464748494A4B4C4D4E4F
ISD: A000000151000000 (OP_READY)
...

Sources