[Bug 926305] Re: fails to load modules for pkcs11 backends
Bug Watch Updater
926305 at bugs.launchpad.net
Sat Aug 16 15:59:11 UTC 2014
** Changed in: opencryptoki
Status: Incomplete => New
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to opencryptoki in Ubuntu.
https://bugs.launchpad.net/bugs/926305
Title:
fails to load modules for pkcs11 backends
Status in openCryptoki:
New
Status in “opencryptoki” package in Ubuntu:
Fix Released
Bug description:
After installing opencryptoki, one should be able to query the
available backend modules with the command "pkcsconf -i". On the
current version in precise (2.3.1+dfsg-3), this is failing with the
following error:
C_GetSlotCount returned 0 slots. Check that your tokens are installed
correctly.
The expected output is:
PKCS#11 Info
Version 2.11
Manufacturer: IBM
Flags: 0x0
Library Description: Meta PKCS11 LIBRARY
Library Version 2.3
I'm not sure what the root cause is, but strace on the pkcsconf
program shows it is looking in the default search path for the backend
libraries (for e.g. the TPM and the soft-token backend). They are
installed in /usr/lib/opencryptoki/stdll which is not in the default
shlib search path and was never in the past when this worked. I
suspect something changed in the package that introduced this bug.
Testing / workaround instructions:
1. stop opencryptoki
2. run pkcs11_startup to generate /var/lib/opencryptoki/pk_config_data
3. edit /var/lib/opencryptoki/pk_config_data specifying the fully qualified path to the backend libraries.
4. start opencryptoki
5. run pkcsconf -i
To manage notifications about this bug go to:
https://bugs.launchpad.net/opencryptoki/+bug/926305/+subscriptions
More information about the foundations-bugs
mailing list