#42342 – Не работает ГОСТовый слот в токенах Jacarta с p11-kit-proxy

Bug 42342 - Не работает ГОСТовый слот в токенах Jacarta с p11-kit-proxy

Summary: Не работает ГОСТовый слот в токенах Jacarta с p11-kit-proxy

Status:	CLOSED FIXED

Alias:	None

Product:	Sisyphus
Classification:	Development
Component:	libjcpkcs11 (show other bugs)
Version:	unstable
Hardware:	x86 Linux

Importance:	P5 normal
Assignee:	manowar@altlinux.org
QA Contact:	qa-sisyphus

URL:
Keywords:

Depends on:
Blocks:

Reported:	2022-04-05 13:43 MSK by Белаш Константин
Modified:	2022-04-07 23:01 MSK (History)
CC List:	2 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description

Белаш Константин 2022-04-05 13:43:17 MSK

Смотрим доступные слоты для Jacarta-2 SE через p11-kit-proxy.so:
# pkcs11-tool --module /usr/lib64/p11-kit-proxy.so -T
Available slots:
Slot 0 (0x11): Aladdin R.D. JaCarta 00 00
  token label        :  STANDART.SE
  token manufacturer : Aladdin R.D.
  token model        : eToken GOST
  token flags        : login required, rng, token initialized, user PIN count low, PIN initialized
  hardware version   : 1.0
  firmware version   : 1.6
  serial num         : 6082004469937675
  pin min/max        : 6/32
Slot 1 (0x12): Aladdin R.D. JaCarta 00 00
C_GetTokenInfo() failed: rv = unknown PKCS11 error
Slot 2 (0x13): Aladdin R.D. JaCarta 00 00
  token label        : STANDART.SE
  token manufacturer : Aladdin R.D.
  token model        : JaCarta Laser
  token flags        : login required, rng, token initialized, PIN initialized
  hardware version   : 1.1
  firmware version   : 1.0
  serial num         : 6082004469937675
  pin min/max        : 4/10

"Slot 1" (token model: JaCarta GOST 2.0) не доступен.

Создание модуля (/etc/pkcs11/modules/libjckt2.module) со след. содержимым:
# cat /etc/pkcs11/modules/libjckt2.module
module: /usr/lib64/libjckt2.so
не решает проблему.

Проблему решает создание симлинка в каталоге /usr/lib64/pkcs11/ на /usr/lib64/libjckt2.so, и тогда слот становится доступным:
# cd /usr/lib64/pkcs11/
# ln -s ../libjckt2.so .
# pkcs11-tool --module /usr/lib64/p11-kit-proxy.so -T
Available slots:
Slot 0 (0x11): Aladdin R.D. JaCarta 00 00
  token label        :  STANDART.SE
  token manufacturer : Aladdin R.D.
  token model        : eToken GOST
  token flags        : login required, rng, token initialized, user PIN count low, PIN initialized
  hardware version   : 1.0
  firmware version   : 1.6
  serial num         : 6082004469937675
  pin min/max        : 6/32
Slot 1 (0x12): Aladdin R.D. JaCarta 00 00
  token label        : STANDART.SE
  token manufacturer : Aladdin R.D.
  token model        : JaCarta GOST 2.0
  token flags        : login required, rng, token initialized, user PIN count low, PIN initialized, user PIN locked, other flags=0x800
  hardware version   : 1.0
  firmware version   : 2.55
  serial num         : 6082004469937675
  pin min/max        : 6/32
Slot 2 (0x13): Aladdin R.D. JaCarta 00 00
  token label        : STANDART.SE
  token manufacturer : Aladdin R.D.
  token model        : JaCarta Laser
  token flags        : login required, rng, token initialized, PIN initialized
  hardware version   : 1.1
  firmware version   : 1.0
  serial num         : 6082004469937675
  pin min/max        : 4/10

Comment 1

manowar@altlinux.org 2022-04-07 15:37:24 MSK

https://git.altlinux.org/tasks/298023/

Comment 2

Repository Robot 2022-04-07 18:55:46 MSK

libjcpkcs11-2.7.4-alt6 -> sisyphus:

 Thu Apr 07 2022 Paul Wolneykien <manowar@altlinux> 2.7.4-alt6
 - Make symlinks to all installed libraries from the pkcs11/ subdir
   (closes: 42342).

Comment 3

Leonid Krivoshein 2022-04-07 23:01:02 MSK

Спасибо!