Ubuntu
opencryptoki package

  1. Bug #1725250
  2. Comment #24

Comment 24 for bug 1725250

Revision history for this message
bugproxy (bugproxy) wrote : Comment bridged from LTC Bugzilla

------- Comment From <email address hidden> 2018-05-16 13:14 EDT-------
Hi Dimitri,

No, libep11 is not the problem and the message that you are seeing on gdb is not the main reason.

This error message:
pkcsconf[187270]: ep11_specific.c ep11tok_init: Error loading shared library 'libep11.so' [libep11.so: cannot open shared object file: No such file or directory]

This is a common error that opencryptoki throws everytime that you have ep11 described on your /etc/opencryptoki/opencryptoki.conf. And throwing this error message doesn't cause segfault or other issue, this is just for logging so we know that you have ep11 in your conf file and that you don't have support of it.

Again, you can remove ep11 from the opencryptoki.conf file, or if you have a machine with the EP11 token and install the libep11 from IBM website, you will see that the output of pkcsconf -t is still wrong, as Christian pointed out.

To me, the problem is in the build process. Something is being done incorrectly or maybe the specific flags that you use on Ubuntu are affecting it somehow and making all the tokens to be recognized as ICA token.

If you want to be sure about what I am talking about EP11, build the project manually from source and install it, you will see the libep11 error message and you will see that everything still works.

I hope I was clear, if not please let me know.