[MacPorts] #52623: p11-kit @0.23.2_1: fails to properly complete operation and disconnect on Sierra

MacPorts noreply at macports.org
Mon Oct 17 00:17:41 CEST 2016


#52623: p11-kit @0.23.2_1: fails to properly complete operation and disconnect on
Sierra
----------------------+----------------------
  Reporter:  uri@…    |      Owner:  devans@…
      Type:  defect   |     Status:  new
  Priority:  Normal   |  Milestone:
 Component:  ports    |    Version:  2.3.4
Resolution:           |   Keywords:
      Port:  p11-kit  |
----------------------+----------------------

Comment (by uri@…):

 >   Check /opt/local/share/p11-kit/modules

 Bingo. That's where I found softhsm2.module file. When I replaced the
 "module: whatever" line with "module: " line, openssl started hanging
 immediately, without even prompting for a PIN. After I removed that file
 out from the /opt/local/share/p11-kit/modules directory, openssl stopped
 hanging, and was completing operation properly:
 {{{
 $ openssl dgst -engine pkcs11 -keyform engine -sign
 "pkcs11:manufacturer=piv_II;object=SIGN%20key;type=private" -sha384
 -sigopt rsa_padding_mode:pss -sigopt rsa_pss_saltlen:-1 -out
 ~/src/t256.dat.sig ~/src/t256.dat
 engine "pkcs11" set.
 PKCS#11 token PIN:
 $ openssl dgst -engine pkcs11 -keyform engine -verify
 "pkcs11:manufacturer=piv_II;object=SIGN%20pubkey;type=public" -sha384
 -sigopt rsa_padding_mode:pss -sigopt rsa_pss_saltlen:-1 -signature
 ~/src/t256.dat.sig ~/src/t256.dat
 engine "pkcs11" set.
 Verified OK
 $
 }}}

 So the offending module turned out to be softhsm2.module. It contains
 "module: /opt/local/lib/softhsm/libsofthsm2.so".

 What now?

-- 
Ticket URL: <https://trac.macports.org/ticket/52623#comment:7>
MacPorts <https://www.macports.org/>
Ports system for the Mac operating system



More information about the macports-tickets mailing list