<?xml version="1.0" encoding="UTF-8" ?>

<bugzilla version="5.2"
          urlbase="https://bugzilla.altlinux.org/"
          
          maintainer="jenya@basealt.ru"
>

    <bug>
          <bug_id>42342</bug_id>
          
          <creation_ts>2022-04-05 13:43:17 +0300</creation_ts>
          <short_desc>Не работает ГОСТовый слот в токенах Jacarta с p11-kit-proxy</short_desc>
          <delta_ts>2022-04-07 23:01:02 +0300</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>4</classification_id>
          <classification>Development</classification>
          <product>Sisyphus</product>
          <component>libjcpkcs11</component>
          <version>unstable</version>
          <rep_platform>x86</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>CLOSED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P5</priority>
          <bug_severity>normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Белаш Константин">bk</reporter>
          <assigned_to name="manowar@altlinux.org">manowar</assigned_to>
          <cc>klark</cc>
    
    <cc>manowar</cc>
          
          <qa_contact>qa-sisyphus</qa_contact>

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>209194</commentid>
    <comment_count>0</comment_count>
    <who name="Белаш Константин">bk</who>
    <bug_when>2022-04-05 13:43:17 +0300</bug_when>
    <thetext>Смотрим доступные слоты для Jacarta-2 SE через p11-kit-proxy.so:
# pkcs11-tool --module /usr/lib64/p11-kit-proxy.so -T
Available slots:
Slot 0 (0x11): Aladdin R.D. JaCarta 00 00
  token label        :  STANDART.SE
  token manufacturer : Aladdin R.D.
  token model        : eToken GOST
  token flags        : login required, rng, token initialized, user PIN count low, PIN initialized
  hardware version   : 1.0
  firmware version   : 1.6
  serial num         : 6082004469937675
  pin min/max        : 6/32
Slot 1 (0x12): Aladdin R.D. JaCarta 00 00
C_GetTokenInfo() failed: rv = unknown PKCS11 error
Slot 2 (0x13): Aladdin R.D. JaCarta 00 00
  token label        : STANDART.SE
  token manufacturer : Aladdin R.D.
  token model        : JaCarta Laser
  token flags        : login required, rng, token initialized, PIN initialized
  hardware version   : 1.1
  firmware version   : 1.0
  serial num         : 6082004469937675
  pin min/max        : 4/10

&quot;Slot 1&quot; (token model: JaCarta GOST 2.0) не доступен.

Создание модуля (/etc/pkcs11/modules/libjckt2.module) со след. содержимым:
# cat /etc/pkcs11/modules/libjckt2.module
module: /usr/lib64/libjckt2.so
не решает проблему.

Проблему решает создание симлинка в каталоге /usr/lib64/pkcs11/ на /usr/lib64/libjckt2.so, и тогда слот становится доступным:
# cd /usr/lib64/pkcs11/
# ln -s ../libjckt2.so .
# pkcs11-tool --module /usr/lib64/p11-kit-proxy.so -T
Available slots:
Slot 0 (0x11): Aladdin R.D. JaCarta 00 00
  token label        :  STANDART.SE
  token manufacturer : Aladdin R.D.
  token model        : eToken GOST
  token flags        : login required, rng, token initialized, user PIN count low, PIN initialized
  hardware version   : 1.0
  firmware version   : 1.6
  serial num         : 6082004469937675
  pin min/max        : 6/32
Slot 1 (0x12): Aladdin R.D. JaCarta 00 00
  token label        : STANDART.SE
  token manufacturer : Aladdin R.D.
  token model        : JaCarta GOST 2.0
  token flags        : login required, rng, token initialized, user PIN count low, PIN initialized, user PIN locked, other flags=0x800
  hardware version   : 1.0
  firmware version   : 2.55
  serial num         : 6082004469937675
  pin min/max        : 6/32
Slot 2 (0x13): Aladdin R.D. JaCarta 00 00
  token label        : STANDART.SE
  token manufacturer : Aladdin R.D.
  token model        : JaCarta Laser
  token flags        : login required, rng, token initialized, PIN initialized
  hardware version   : 1.1
  firmware version   : 1.0
  serial num         : 6082004469937675
  pin min/max        : 4/10</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>209287</commentid>
    <comment_count>1</comment_count>
    <who name="manowar@altlinux.org">manowar</who>
    <bug_when>2022-04-07 15:37:24 +0300</bug_when>
    <thetext>https://git.altlinux.org/tasks/298023/</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>209298</commentid>
    <comment_count>2</comment_count>
    <who name="Repository Robot">repository-robot</who>
    <bug_when>2022-04-07 18:55:46 +0300</bug_when>
    <thetext>libjcpkcs11-2.7.4-alt6 -&gt; sisyphus:

 Thu Apr 07 2022 Paul Wolneykien &lt;manowar@altlinux&gt; 2.7.4-alt6
 - Make symlinks to all installed libraries from the pkcs11/ subdir
   (closes: 42342).</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>209311</commentid>
    <comment_count>3</comment_count>
    <who name="Leonid Krivoshein">klark</who>
    <bug_when>2022-04-07 23:01:02 +0300</bug_when>
    <thetext>Спасибо!</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>