read cert from smart card

David Woodhouse dwmw2 at infradead.org
Sun Feb 21 15:06:40 PST 2016


On Mon, 2016-02-22 at 00:39 +0200, Mithat Bozkurt wrote:
> I still have same error on p11-kit command though remove /etc/pkcs11
> and reboot. I don't understand Why I see this output
> 
> C_Initialize
>   IN: pInitArgs = NULL
> C_Initialize = CKR_ARGUMENTS_BAD
> 
> So I recreated that directory and akis.module and change module path
> as below now Is it OK??????
> 
> #AKIS
> #module: /usr/lib/libakisp11.so
> module: /usr/lib/x86_64-linux-gnu/opensc-pkcs11.so
> managed: yes
> trust-policy: yes
> log-calls: yes

Seems reasonable. Except for the fact that you *really* shouldn't have
had to create that for yourself. That's a bug in your distribution's
packaging of OpenSC. Please file a bug.

> akis: /usr/lib/x86_64-linux-gnu/opensc-pkcs11.so
> C_GetInfo
>  OUT: pInfo = {
> cryptokiVersion: 2.20
> manufacturerID: "OpenSC (www.opensc-project.org)"
> flags: 0
> libraryDescription: "Smart card PKCS#11 API"
> libraryVersion: 0.0
>       }
> C_GetInfo = CKR_OK
>     library-description: Smart card PKCS#11 API
>     library-manufacturer: OpenSC (www.opensc-project.org)
>     library-version: 0.0
> C_GetSlotList
>   IN: tokenPresent = CK_TRUE
>   IN: pulCount = 0x7FFF1CE07958 = 256
>  OUT: pSlotList = (0) [  ]
> C_GetSlotList = CKR_OK

OpenSC didn't find the device.

https://github.com/OpenSC/OpenSC/wiki/Debugging-OpenSC-and-reporting-bugs

-- 
dwmw2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5691 bytes
Desc: not available
URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20160221/ef2482a0/attachment.bin>


More information about the openconnect-devel mailing list