[MacPorts] #52623: p11-kit @0.23.2_1: fails to properly complete operation and disconnect on Sierra
MacPorts
noreply at macports.org
Mon Oct 17 00:17:41 CEST 2016
#52623: p11-kit @0.23.2_1: fails to properly complete operation and disconnect on
Sierra
----------------------+----------------------
Reporter: uri@… | Owner: devans@…
Type: defect | Status: new
Priority: Normal | Milestone:
Component: ports | Version: 2.3.4
Resolution: | Keywords:
Port: p11-kit |
----------------------+----------------------
Comment (by uri@…):
> Check /opt/local/share/p11-kit/modules
Bingo. That's where I found softhsm2.module file. When I replaced the
"module: whatever" line with "module: " line, openssl started hanging
immediately, without even prompting for a PIN. After I removed that file
out from the /opt/local/share/p11-kit/modules directory, openssl stopped
hanging, and was completing operation properly:
{{{
$ openssl dgst -engine pkcs11 -keyform engine -sign
"pkcs11:manufacturer=piv_II;object=SIGN%20key;type=private" -sha384
-sigopt rsa_padding_mode:pss -sigopt rsa_pss_saltlen:-1 -out
~/src/t256.dat.sig ~/src/t256.dat
engine "pkcs11" set.
PKCS#11 token PIN:
$ openssl dgst -engine pkcs11 -keyform engine -verify
"pkcs11:manufacturer=piv_II;object=SIGN%20pubkey;type=public" -sha384
-sigopt rsa_padding_mode:pss -sigopt rsa_pss_saltlen:-1 -signature
~/src/t256.dat.sig ~/src/t256.dat
engine "pkcs11" set.
Verified OK
$
}}}
So the offending module turned out to be softhsm2.module. It contains
"module: /opt/local/lib/softhsm/libsofthsm2.so".
What now?
--
Ticket URL: <https://trac.macports.org/ticket/52623#comment:7>
MacPorts <https://www.macports.org/>
Ports system for the Mac operating system
More information about the macports-tickets
mailing list