gpkcs11-dev — Discussion about bugs and new features in the gpkcs11 library

[gpkcs11-dev] patch to make it work again

[Lars S. <la...@pr...>]

Hello,

I will use your gpkcs11 in order to test the HSM support of ejbca.org

I have worked with the CVS head and with my changes the project is now building and running on Debian/testing.
I have not tested it on other platforms. I have just tried not to touch things dealing with other platforms.

Apart from changing the build to the resent autobuild environment I had to do some other changes:
* The function pointer array from ceay_symbols.c is not used. I removed it since it was not working. I this feature was not finished yet and had not been tested properly.
* The code under IniFile is not used. Instead the old ini file implementation is used. Seems that IniFile was only for Windows.
* I fixed mutex.c so that it is working on Linux.
* The IDEA algoritm is removed from the ceay token due to changes in openssl.
* I had to put I mutex when doing the RSA operation in order to avoid crashing when several threads all with different pkcs#11 sessions are accessing the ceay token.

I hope that you want to check in my patch in the CVS head.

Later on I will see if it is possible to add elliptic curve support to the ceay token.

Here is the patch: http://bunny.primekey.se/~lars/patch_gpkcs11.txt

I have built the project like this:

wget http://bunny.primekey.se/~lars/patch_gpkcs11.txt
cvs -z3 -d:pserver:ano...@gp...:/cvsroot/gpkcs11 co -PA gpkcs11
cd gpkcs11
patch -p0 < ../patch_gpkcs11.txt
autoreconf -fis
./configure --prefix=$PWD/usr --enable-ceay-token --with-thread=yes
make install

Best Regards,
Lars Silvén

[gpkcs11-dev] Binaries for ceay_token?

[Philipp <pg...@fu...>]

Hi,

Should I switch to german?

Thank you very much for making gpkcs11 available as OpenSource!

I stumbled across gpkcs11 about a week ago, and tried to get it running, bu=
t=20
without much luck.

gpkcs11 itself compiles somewhat cleanly, but I didn=B4t succeed to get=20
ceay_token linked together. I tried it with openssl-0.9.8 and openssl-0.9.6=
,=20
but it doesn=B4t work.

Does anyone have up-to-date binaries (perhaps for SuSE 9.3 or compatible?)?

How is the specialized openssl variante supposed to be linked with ceay_tok=
en?=20
statically or dynamically?

What about renaming the special openssl library to something different?=20
opensslgspkcs or something? Then there wouldn=B4t be much chance for confli=
cts.

Is it really necessary not to distribute the openssl package with the gpkcs=
11=20
package? Distributing it together (in a already prepared way) would help a =
=20
lot, I think.
And having nicely installable binary RPM=B4s/dpkg=B4s would also not be a b=
ad=20
idea.

Now regarding the registry:

=46or the PKCS#11 drivers, I am currently proposing /usr/lib/pks11/*.so as =
a=20
"registry" for all PKCS#11 drivers. So I would suggest that gpkcs11 install=
s=20
itself there too.
=46or the gpkcs Tokens, I would suggest something like /usr/lib/gpkcs11-tok=
ens/=20
or something.
gpkcs should automatically try to load all the tokens which are installed i=
n=20
that directory.

Regarding the PersistentRootDir, the ceay_token should automatically use=20
~/.ceay_token/  (and the other tokens accordingly).

Where is the TCSC Token implementation? I could not find it.

Where is the DATA Token implementation?

Regarding PKCS#11 client, I would suggest to bundle pkcs11-tool from OpenSC=
=20
with gpkcs#11. http://www.opensc.org/

I found another soft-token PKCS#11 driver:
http://people.su.se/~lha/soft-pkcs11/

(I wish there were a mixture between soft-pkcs11 and gpkcs. The simple desi=
gn=20
from soft-pkcs11, the functionality of ceay-token)

The pkcs11.log has the error messages:

/* CI_GetDLLHandle(): Opening Dynamic Library=20
'/usr/local/lib/libceay_tok.so.1.0.1' failed: /usr/local/lib/libceay_tok.so=
=2E1
=2E0.1: undefined symbol: CI_CeaySymbolTable(GENERAL ERROR) */
/* CI_InitTokenDll(): retrieving dll handle (GENERAL ERROR) */
/* CI_TokenInit(): Init'ing of Token 'CEAY-TOKEN' failed: no valid init=20
symbol(GENERAL ERROR) */

Thank you for your help,
Philipp G=FChring

[gpkcs11-dev] Strange parameter in C_CloseAllSessions function

[LEDISEZ E. <le...@be...>]

Hello,


I'm currently working on an implementation of PKCS#11 v2.20 and 
something disturb me in the specifications.

In the management of sessions, I don't understand why the function 
C_CloseAllSessions has got only one parameter : the slotID.
The operations to get the sessions from a slotID are non intuitive.
For one slot there is one token, but this token can contain multiple 
sessions with multiple applications.

It would be more easy to pass as a parameter, the application pointer 
provided in C_OpenSession function.

Perhaps someone has already worked on this problem ?

thanks.






Les informations contenues dans ce message électronique peuvent être de nature confidentielle et soumises à une obligation de secret. Elles sont destinées à l'usage exclusif du réel destinataire. Si vous n'êtes pas le réel destinataire ou si vous recevez ce message par erreur, merci de nous le notifier immédiatement en le retournant à l'adresse de son émetteur.

The information contained in this e-mail may be privileged and confidential. It is intended for the exclusive use of the designated recipients named above. If you are not the intended recipient or if you receive this e-mail in error, please notify us immediatly and return the original message at the address of the sender.

[Fwd: Re: [gpkcs11-dev] please clear my doubts]

[<mar...@vr...>]

[gpkcs11-dev] please clear my doubts

[laksh m. <rml...@ya...>]

hello,
 
 We are three memeber team ,now we are doing project in cryptography so the we use gpkcs11, our doubts is
 
 "GPKCS11 support smart card or not?"
 
Please help us!
 
 Thanks in advance.
                            regards,
                         lakshmanan.rm
 


		
---------------------------------
Yahoo! Messenger
 Show us what our next emoticon should look like. Join the fun.

[gpkcs11-dev] Building ceay_token on windows

[David A. <dav...@la...>]

Hello,

I'm trying to build gpkcs11 (0.7.2 ans also CVS extract) with VC6 on Wind=
ows 2003.
All works fine until VC6 tries to buil the ceay_teken projet. At this sta=
ge, the linking phase produces the following error (with ceay-openssl-0.9=
.6 ) :

Generating Code...
Linking...
   Creating library final_check/ceay_tok.lib and object final_check/ceay_=
tok.exp
ceay_token.obj : error LNK2001: unresolved external symbol _CI_Ceay_Decry=
ptFinal
ceay_token.obj : error LNK2001: unresolved external symbol _CI_Ceay_Decry=
ptUpdate
ceay_token.obj : error LNK2001: unresolved external symbol _CI_Ceay_Decry=
pt
ceay_token.obj : error LNK2001: unresolved external symbol _CI_Ceay_Decry=
ptInit
ceay_token.obj : error LNK2001: unresolved external symbol _CI_Ceay_Encry=
ptFinal
ceay_token.obj : error LNK2001: unresolved external symbol _CI_Ceay_Encry=
ptUpdate
ceay_token.obj : error LNK2001: unresolved external symbol _CI_Ceay_Encry=
pt
ceay_token.obj : error LNK2001: unresolved external symbol _CI_Ceay_Encry=
ptInit
final_check\ceay_tok.dll : fatal error LNK1120: 8 unresolved externals
Error executing link.exe.
Creating browse info file...
ceay_tok.dll - 9 error(s), 14 warning(s)

I've tried to use openssl-0.9.6 official distrib as well as ceay-openssl-=
0.9.6 with very similar behavior.
It seems that this problem whas encountered previously by Cristiano Borgo=
novi (e-mail ?) and Christian Gredig (e-mail ?) but I didn't find applica=
ble answer...

Thanks in advance for your helping.
David


From: Cristiano Borgonovi Gavros <cristiano@hs...>
 gpkcs11 link error (win2000)   
2004-08-04 08:04 
 Hi
 
 I would like to build the gpkcs11 on win2000 with vc6.
 I link ceay_token project to a special version of openssl-0.9.6 
 (ceay-openssl-0.9.6) but I get the following errors.
 Somebody help me to build this project???
 
 Linking...
    Creating library final_check/ceay_tok.lib and object 
 final_check/ceay_tok.exp
 ceay_token.obj : error LNK2001: unresolved external symbol 
 _CI_Ceay_DecryptFinal
 ceay_token.obj : error LNK2001: unresolved external symbol 
 _CI_Ceay_DecryptUpdate
 ceay_token.obj : error LNK2001: unresolved external symbol _CI_Ceay_Decr=
ypt
 ceay_token.obj : error LNK2001: unresolved external symbol 
 _CI_Ceay_DecryptInit
 ceay_token.obj : error LNK2001: unresolved external symbol 
 _CI_Ceay_EncryptFinal
 ceay_token.obj : error LNK2001: unresolved external symbol 
 _CI_Ceay_EncryptUpdate
 ceay_token.obj : error LNK2001: unresolved external symbol _CI_Ceay_Encr=
ypt
 ceay_token.obj : error LNK2001: unresolved external symbol 
 _CI_Ceay_EncryptInit
 final_check\ceay_tok.dll : fatal error LNK1120: 8 unresolved externals
 Error executing link.exe.
 
 ceay_tok.dll - 9 error(s), 0 warning(s)
 
 Thanks
 Cristiano=0A=0AAcc=E9dez au courrier =E9lectronique de La Poste : www.la=
poste.net ; =0A3615 LAPOSTENET (0,34=80/mn) ; t=E9l : 08 92 68 13 50 (0,3=
4=80/mn)=0A=0A

[gpkcs11-dev] How to help?

[Jeff <scu...@ya...>]

Hi,

If possible, I would like to help out with the
project.

I have a B.A. and M.S. in Mathematics and I have been
a software developer for 12+ years.
 
Hope to hear from you :)
 
Jeff


		
__________________________________ 
Do you Yahoo!? 
Meet the all-new My Yahoo! - Try it today! 
http://my.yahoo.com 
 

[gpkcs11-dev] Problem with C_GenerateKeyPair

[Angel M. G. <an...@ti...>]

Hello:

I tried to generate a RSA key pair with the function:

C_GenerateKeyPair

but I have a problem. This function make a key pair, but=20
the public key haven=B4t a label, although I used a label in=20
the public key template. The private key have label.

I used those templates:

CK_CHAR label[] =3D "public_key";

CK_ATTRIBUTE publicKeyTemplate[] =3D {
{CKA_LABEL, label, sizeof(label)},
{CKA_KEY_TYPE, &tipoClave, sizeof(tipoClave)},
{CKA_ENCRYPT, &tru, sizeof(tru)},
{CKA_VERIFY, &tru, sizeof(tru)},
{CKA_WRAP, &tru, sizeof(tru)},
{CKA_MODULUS_BITS, &modulusBits, sizeof
(modulusBits)},
{CKA_PUBLIC_EXPONENT, publicExponent, sizeof=20
(publicExponent)}
};


CK_ATTRIBUTE privateKeyTemplate[] =3D {
{CKA_TOKEN, &tru, sizeof(tru)},
{CKA_PRIVATE, &tru, sizeof(tru)},
{CKA_SUBJECT, (void *)nombre, strlen(nombre)},
{CKA_ID, id, sizeof(id)},
{CKA_SENSITIVE, &tru, sizeof(tru)},
{CKA_DECRYPT, &tru, sizeof(tru)},
{CKA_SIGN, &tru, sizeof(tru)},
{CKA_UNWRAP, &tru, sizeof(tru)},
{CKA_LABEL, (void *)nombre, strlen(nombre)}
};


rv =3D (*ckFunc->C_GenerateKeyPair )( hSession,=20
&mechanism, publicKeyTemplate, NumAttrPublico,=20
privateKeyTemplate, NumAttrPrivado, &hPublicKey,=20
&hPrivateKey);

What is incorrect?.

Thanks.

[gpkcs11-dev] gpkcs11 link error (win2000)

[Cristiano B. G. <cri...@hs...>]

Hi

I would like to build the gpkcs11 on win2000 with vc6.
I link ceay_token project to a special version of openssl-0.9.6 
(ceay-openssl-0.9.6) but I get the following errors.
Somebody help me to build this project???

Linking...
   Creating library final_check/ceay_tok.lib and object 
final_check/ceay_tok.exp
ceay_token.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_DecryptFinal
ceay_token.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_DecryptUpdate
ceay_token.obj : error LNK2001: unresolved external symbol _CI_Ceay_Decrypt
ceay_token.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_DecryptInit
ceay_token.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_EncryptFinal
ceay_token.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_EncryptUpdate
ceay_token.obj : error LNK2001: unresolved external symbol _CI_Ceay_Encrypt
ceay_token.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_EncryptInit
final_check\ceay_tok.dll : fatal error LNK1120: 8 unresolved externals
Error executing link.exe.

ceay_tok.dll - 9 error(s), 0 warning(s)

Thanks
Cristiano

[gpkcs11-dev] gdbm and signing problems

[Christian G. <c1g...@hs...>]

Hi

I'm using gpkcs and the provided softtoken with Windows2000 and Mozilla 
1.5. I'm able to add gpkcs11.dll as a PKCS#11 security device to 
Mozilla. Further, I can use the softtoken in Mozilla to generate a key 
pair and request a certificate form a OpenCA environment. I'm also able 
to send an email signed by the softtoken. So far everything allright. 
But now, I have the following two problems:

1.) When I restart Mozilla and try to manage the securtiy devices or 
send another signed email, I will get the following error message box 
and Mozilla crashes. I'm getting this error also when I try to run the 
testprogramm gpkcs11_test.c provided with the gpkcs source:

Debug Assertion Failed!
Programm: C:\Program Files\...\mozilla.exe
File: dbgheap.c
Line: 1132
Expression: _CrtIsValidHeapPointer(pUserData)

When I comment out the line "TC_free(new_attr.pValue);" in the file 
cryptdb.c (at the end of the function CDB_ParseObject(), line no 231) 
and rebuild the code, I don't get this error message anymore.
It seems that there is a problem with gdbm. Did anybody else experience 
problems like this or has an idea what's wrong here?

2.) Everytime after signing an email with the softtoken, the private key 
object is removed from the softoken, but the public key and the 
certificate object remain on the softtoken (that means in the gdbm data 
file). To sign a second message, I have either to get a new certificate 
with private/public key or to replace the gdbm data file with one 
containing the private/public key and certificate object. Does anybody 
know why the private key object is removed from the token after signing 
an email?

Thanks for the appreciated help,
Chris

[gpkcs11-dev] ceay_token compilation on Windows 2000

[Bo W. <me...@bo...>]

Hi everyone,

I have some problems to compile ceay_token on Windows 2000 and VC++.

In cryptdb.h, it need to include <gdbm.h>.  When I put the gdbm.h under the
VC++'s include directory, and compile again, it generated about 180 errors.

I think that the gdbm.h in gpkcs11 is for Unix, so I downloaded a Win32 gdbm
package from GNUWin32.  The error messages are almost same.

Anyone who know how to compile ceay_token on Windows 2000 Platform, pls help
me.

Thank you very much in advance.

Bo Wu

Re: [gpkcs11-dev] unresolved external symbol

[Martin B. <mar...@gm...>]

Hi Christian,

You need to link a special version of openssl-0.9.4/6, where these 
openssl function symbols have been prefixed with 'CI_Ceay_'. See the
TOKEN SPECIFIC INFORMATION for ceay_token: in the toplevel README of 
gpkcs11. Actually I ended up linking the modified libeay32 statically to 
avoid hassle with other versions hanging out in system paths.

Regards

Martin

Christian Gredig wrote:
> Hi
> 
> I would like to build the gpkcs11 on win2000 with vc6, but when I'm 
> trying to link the ceay_token project I get the following errors. It 
> seems that a library or something is missing. I already added the 
> gpkcs11.lib, libeay32.lib (openssl 0.9.6) and the gdbm.lib.
> 
> 
> ceay_token.obj : error LNK2001: unresolved external symbol 
> _CI_Ceay_DecryptFinal
> 
> ceay_token.obj : error LNK2001: unresolved external symbol 
> _CI_Ceay_DecryptUpdate
> 
> ceay_token.obj : error LNK2001: unresolved external symbol 
> _CI_Ceay_Decrypt
> 
> ceay_token.obj : error LNK2001: unresolved external symbol 
> _CI_Ceay_DecryptInit
> 
> ceay_token.obj : error LNK2001: unresolved external symbol 
> _CI_Ceay_EncryptFinal
> 
> ceay_token.obj : error LNK2001: unresolved external symbol 
> _CI_Ceay_EncryptUpdate
> 
> ceay_token.obj : error LNK2001: unresolved external symbol 
> _CI_Ceay_Encrypt
> 
> ceay_token.obj : error LNK2001: unresolved external symbol 
> _CI_Ceay_EncryptInit
> 
> ceay_token.obj : error LNK2001: unresolved external symbol 
> _CI_Ceay_RAND_cleanup
> 
> ceay_token.obj : error LNK2001: unresolved external symbol 
> _CI_Ceay_SHA1_Init
> 
> cryptdb.obj : error LNK2001: unresolved external symbol 
> _CI_Ceay_SHA1_Init
> 
> ceay_token.obj : error LNK2001: unresolved external symbol 
> _CI_Ceay_SHA1_Final
> 
> cryptdb.obj : error LNK2001: unresolved external symbol 
> _CI_Ceay_SHA1_Final
> 
> ceay_token.obj : error LNK2001: unresolved external symbol 
> _CI_Ceay_SHA1_Update
> 
> cryptdb.obj : error LNK2001: unresolved external symbol 
> _CI_Ceay_SHA1_Update
> 
> ceay_token.obj : error LNK2001: unresolved external symbol 
> _CI_Ceay_RSA_free
> 
> ceay_token.obj : error LNK2001: unresolved external symbol 
> _CI_Ceay_RSA_private_encrypt
> 
> ceay_token.obj : error LNK2001: unresolved external symbol 
> _CI_Ceay_RSA_size
> 
> ceay_token.obj : error LNK2001: unresolved external symbol 
> _CI_Ceay_RSA_public_decrypt
> 
> ceay_token.obj : error LNK2001: unresolved external symbol 
> _CI_Ceay_RSA_generate_key
> 
> ceay_token.obj : error LNK2001: unresolved external symbol 
> _CI_Ceay_BN_bin2bn
> 
> ceay_token.obj : error LNK2001: unresolved external symbol 
> _CI_Ceay_RAND_seed
> 
> cryptdb.obj : error LNK2001: unresolved external symbol 
> _CI_Ceay_RAND_seed
> 
> ceay_token.obj : error LNK2001: unresolved external symbol 
> _CI_Ceay_RAND_bytes
> 
> cryptdb.obj : error LNK2001: unresolved external symbol 
> _CI_Ceay_RAND_bytes
> 
> ceay_token.obj : error LNK2001: unresolved external symbol 
> _CI_Ceay_RSA_new
> 
> ceay_token.obj : error LNK2001: unresolved external symbol 
> _CI_Ceay_BN_bn2bin
> 
> cryptdb.obj : error LNK2001: unresolved external symbol _CI_Ceay_SHA1
> 
> ctok_mem.obj : error LNK2001: unresolved external symbol 
> _CI_Ceay_SHA_Init
> 
> final_check\ceay_tok.dll : fatal error LNK1120: 24 unresolved 
> externals
> 
> Error executing link.exe.
> 
>  
> Does anybody have an idea what is missing here?
> Thank you for your appreciated help
> 
> Chris Gredig
> 
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by: SF.net Giveback Program.
> Does SourceForge.net help you be more productive?  Does it
> help you create better code?   SHARE THE LOVE, and help us help
> YOU!  Click Here: http://sourceforge.net/donate/
> _______________________________________________
> gpkcs11-dev mailing list
> gpk...@li...
> https://lists.sourceforge.net/lists/listinfo/gpkcs11-dev
> 

[gpkcs11-dev] unresolved external symbol

[Christian G. <c1g...@hs...>]

Hi

I would like to build the gpkcs11 on win2000 with vc6, but when I'm 
trying to link the ceay_token project I get the following errors. It 
seems that a library or something is missing. I already added the 
gpkcs11.lib, libeay32.lib (openssl 0.9.6) and the gdbm.lib.


ceay_token.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_DecryptFinal

ceay_token.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_DecryptUpdate

ceay_token.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_Decrypt

ceay_token.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_DecryptInit

ceay_token.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_EncryptFinal

ceay_token.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_EncryptUpdate

ceay_token.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_Encrypt

ceay_token.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_EncryptInit

ceay_token.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_RAND_cleanup

ceay_token.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_SHA1_Init

cryptdb.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_SHA1_Init

ceay_token.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_SHA1_Final

cryptdb.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_SHA1_Final

ceay_token.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_SHA1_Update

cryptdb.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_SHA1_Update

ceay_token.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_RSA_free

ceay_token.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_RSA_private_encrypt

ceay_token.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_RSA_size

ceay_token.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_RSA_public_decrypt

ceay_token.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_RSA_generate_key

ceay_token.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_BN_bin2bn

ceay_token.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_RAND_seed

cryptdb.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_RAND_seed

ceay_token.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_RAND_bytes

cryptdb.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_RAND_bytes

ceay_token.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_RSA_new

ceay_token.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_BN_bn2bin

cryptdb.obj : error LNK2001: unresolved external symbol _CI_Ceay_SHA1

ctok_mem.obj : error LNK2001: unresolved external symbol 
_CI_Ceay_SHA_Init

final_check\ceay_tok.dll : fatal error LNK1120: 24 unresolved 
externals

Error executing link.exe.

 
Does anybody have an idea what is missing here?
Thank you for your appreciated help

Chris Gredig

[gpkcs11-dev] Re: Problem - sign and verify using gpkcs#11

[Martin B. <mar...@gm...>]

Hi at gpkcs11-dev,

Hmm, a quite common problem with the ceay-token seems to be the line

#if !defined(CK_Win32) && !defined(DEBUG_SIGNAL)
    kill(getpid(),SIGHUP);
#endif

in cryptdb.c. Could someone explain the hidden charms of that code? It
keeps the normal user from using the library!
I think it is a leftover from some code testing.

Regards

Martin

[gpkcs11-dev] Problem - sign and verify using gpkcs#11

[sita c. <sr...@ho...>]

Hi,

I'm using OpenSSL Wrap Token. Able to open session,=20
but not able to login as I'm working with default PIN=20
number of the token. Any help is appreciated.

My primary task is to sign and verify documents sent by=20
the clients. I've downloaded gpkcs11 cryptoki software=20
and tried sample programs listed (test_sign.c).

Program executes partially and doesn't seem to recognize any objects =
present on the token.Function loadpubRSAkey() is never executed.

Thanks in advance,
Sita
cha...@ya...

[gpkcs11-dev] Re: is ok

[Kevin X. <kev...@ho...>]

Re: is ok

[gpkcs11-dev] =?iso-8859-1?Q?gpkcs11_netscape_installation_trouble?=

[=?iso-8859-1?Q?<erw...@li...>]

Hi,
i am a new user of gpkcs11. I want to develop a new token but first of all, i have some troubles to install gpkcs11 in Netscape.

In fact, i compiled successfully gpkcs11 but when i added it in Netscape in the security part i had not ceay-token access. I specified the fully libgpkcs11 path and was able to see the lib in tne security part. But when i tried to edit the new module, no module existed 

Please, someone can give me some information or documentations to progress. 

Thank a lot.

Erwan
--------------
EXCEPTIONNEL!
Tiscali lance les forfaits Internet Illimit=E9s,
=E0 partir de 15,95EUR / mois.
Pour en profiter,cliquez ici: http://register.tiscali.fr/forfaits/
Offres soumises =E0 conditions.

[gpkcs11-dev] ...continuation: Problem storing objects in the software token

[Calogero <ca...@ti...>]

...I saw the Problem storing objects post was truncated this is the last =
part:

   It seems the easiest thing in the worl but this code doesn't work, or =
the sw token doesn't work. The log file reports this problem (look at =
the end):
   =20
/* C_Initialize(): ...complete (OK) */
/* C_GetSlotList(): starting... (OK) */
/* C_GetSlotList(): Listing only slots with present tokens (OK) */
DO_FKT(C_GetSlotList, (TRUE,(nil),0xbffff888));
/* C_GetSlotList(): computing needed size of List-Array (OK) */
/* C_GetSlotList(): starting... (OK) */
/* C_GetSlotList(): Listing only slots with present tokens (OK) */
DO_FKT(C_GetSlotList, (TRUE,0x804ab78,0xbffff888));
/* C_GetSlotList(): *pulCount: 1(OK) */
/* C_GetSlotList(): returning *pulCount: 1(OK) */
/* C_GetSlotList(): ...complete (OK) */
/* C_OpenSession(): starting... (OK) */
DO_FKT(C_OpenSession, (0,6,(nil),(nil),0xbffff880));
/* CI_Ceay_OpenSession(): starting... (OK) */
/* CI_Ceay_ReadPersistentFile(): starting... (OK) */
/* CDB_Open(): no further objects (OK) */
/* CI_Ceay_ReadPersistentFile(): ...complete (OK) */
/* CI_Ceay_OpenSession(): ...complete (OK) */
/* C_OpenSession(): for Session 2...complete(OK) */
/* C_Login(): starting... (OK) */
DO_FKT(C_Login, (2,1,<opaque PIN>,8));
/* CI_Ceay_Login(): starting... (OK) */
/* CI_Ceay_TokenObjLoad(): starting... (OK) */
/* CDB_Open(): no further objects (OK) */
/* CI_Ceay_TokenObjLoad(): ...complete (OK) */
/* CI_Ceay_Login(): complete... (OK) */
/* CI_PropagateSessionState(): starting... (OK) */
/* CI_PropagateSessionState(): setting state to 3 for session 2(OK) */
/* CI_PropagateSessionState(): ...done (OK) */
/* C_Login(): ...complete (OK) */
/* C_GenerateKeyPair(): starting... (OK) */
DO_FKT(C_GenerateKeyPair, (2,{CKM_RSA_PKCS_KEY_PAIR_GEN, NULL_PTR, =
0x00000000},((ENCRYPT 01: #x00000001)
 (VERIFY 01: #x00000001)
 (WRAP 01: #x00000001)
 (MODULUS_BITS 00:03:00:00: #x00000004)
 (PUBLIC_EXPONENT 03: #x00000001)
 ),5,((TOKEN 01: #x00000001)
 (PRIVATE 01: #x00000001)
 (SUBJECT 54:65:73:74:69:6e:67:20:6b:65:79:73: #x0000000c)
 (ID 31:32:33: #x00000003)
 (SENSITIVE 01: #x00000001)
 (DECRYPT 01: #x00000001)
 (SIGN 01: #x00000001)
 (UNWRAP 01: #x00000001)
 ),8,0xbffff870,0xbffff86c));
/* CI_ObjReadTemplate(): starting... (OK) */
/* CI_ObjReadTemplate(): ...complete (OK) */
/* CI_ObjReadTemplate(): starting... (OK) */
/* CI_ObjReadTemplate(): ...complete (OK) */
/* CI_Ceay_GenerateKeyPair(): starting... (OK) */
/* CI_Ceay_GenerateKeyPair(): warning: public key type not defined =
(TEMPLATE INCONSISTENT) */
/* CI_Ceay_GenerateKeyPair(): warning: private key type not defined =
(TEMPLATE INCONSISTENT) */
/* CI_ObjReadTemplate(): starting... (OK) */
/* CI_ObjReadTemplate(): ...complete (OK) */
/* CI_ObjReadTemplate(): starting... (OK) */
/* CI_ObjReadTemplate(): ...complete (OK) */
/* CI_Ceay_GeneratePair(): session_data is 0x804ab88(OK) */
/* CI_Ceay_RSA_Callback(): callback for prime suspected: 0(OK) */
/* CI_Ceay_RSA_Callback(): callback for prime suspected: 1(OK) */
/* CI_Ceay_RSA_Callback(): callback for prime suspected: 2(OK) */
/* CI_Ceay_RSA_Callback(): callback for prime suspected: 3(OK) */
/* CI_Ceay_RSA_Callback(): callback for prime suspected: 4(OK) */
/* CI_Ceay_RSA_Callback(): callback for prime rejected: 0(OK) */
/* CI_Ceay_RSA_Callback(): callback for prime suspected: 0(OK) */
/* CI_Ceay_RSA_Callback(): callback for prime suspected: 1(OK) */
/* CI_Ceay_RSA_Callback(): callback for prime suspected: 2(OK) */
/* CI_Ceay_RSA_Callback(): callback for prime suspected: 3(OK) */
/* CI_Ceay_RSA_Callback(): callback for prime suspected: 4(OK) */
/* CI_Ceay_RSA_Callback(): callback for prime rejected: 1(OK) */
/* CI_ObjMergeObj(): starting... (OK) */
/* CI_ObjMergeObj(): ...complete (OK) */
/* CI_ObjMergeObj(): starting... (OK) */
/* CI_ObjMergeObj(): ...complete (OK) */
/* CI_Ceay_GenerateKeyPair(): ...complete (OK) */
/* CI_TokenObjAdd(): starting... (OK) */
/* CI_Ceay_TokenObjAdd(): starting... (OK) */
/* CI_Ceay_TokenObjAdd(): cache already loaded =
(IMPL_DATA(persistent_cache): 0x804ac18(OK) */      <----- HERE


I tried also to store a certificate, but when the CI_Ceay_TokenObjAdd() =
is called, the problem is the same: "cache already loaded".
If you know how I can resolve this problem and complete my thesis I'll =
be very grateful with you.

Thank you in very much.

Calogero.=20
ca...@ti...

[gpkcs11-dev] Problem storing objects in the software token

[Calogero <ca...@ti...>]

I'm writing for my thesis an application that signs and verify messages, =
making use smart-card. I installed the gpkcs11 and the ceay sw token to =
test it but I had some problems storing objects in the sw token.

These are the steps to generate a key pairs:
1-I get a list of all the slots with a token present
2-I open a R/W session with a specified token
3-I log into the token=20
4-I generate the keys pair

and this is a simple code to do it:

int main(void){
  CK_RV rv;
  CK_ULONG ulSlotWithTokenCount;
  CK_SLOT_ID_PTR pSlotWithTokenList;
  CK_SESSION_HANDLE hSession;

  int num=3D0;
  char *user_pin=3D"12345678";

  CK_BBOOL bTrue=3DTRUE;
  CK_OBJECT_HANDLE hPublicKey, hPrivateKey;
  CK_MECHANISM keyPair_mechanism=3D{CKM_RSA_PKCS_KEY_PAIR_GEN, =
NULL_PTR,0};
  CK_ULONG modulusBits=3D768;
  CK_BYTE publicExponent[]=3D{3};
  CK_CHAR subject[]=3D{'T','e','s','t','i','n','g',' ','k','e','y','s'};
  CK_BYTE id[]=3D{'1','2','3'};
  CK_ATTRIBUTE publicKeyTemplate[]=3D{
    {CKA_ENCRYPT,&bTrue,sizeof(bTrue)},
    {CKA_VERIFY,&bTrue,sizeof(bTrue)},
    {CKA_WRAP,&bTrue,sizeof(bTrue)},
    {CKA_MODULUS_BITS,&modulusBits,sizeof(modulusBits)},
    {CKA_PUBLIC_EXPONENT,publicExponent,sizeof(publicExponent)}
  };
 =20
  CK_ATTRIBUTE privateKeyTemplate[]=3D{
    {CKA_TOKEN,&bTrue,sizeof(bTrue)},
    {CKA_PRIVATE,&bTrue,sizeof(bTrue)},
    {CKA_SUBJECT, subject,sizeof(subject)},
    {CKA_ID,id,sizeof(id)},
    {CKA_SENSITIVE,&bTrue,sizeof(bTrue)},
    {CKA_DECRYPT,&bTrue,sizeof(bTrue)},
    {CKA_SIGN,&bTrue,sizeof(bTrue)},
    {CKA_UNWRAP,&bTrue,sizeof(bTrue)}
  };
 =20
  rv=3D C_Initialize(NULL_PTR);
 =20
  //Get list of all slots with a token present
  rv=3D C_GetSlotList(TRUE, NULL_PTR, &ulSlotWithTokenCount);
  cout<<"Number of slots with a token present: =
"<<int(ulSlotWithTokenCount)<<'\n';
  pSlotWithTokenList =3D(CK_SLOT_ID_PTR) =
malloc(sizeof(CK_SLOT_ID)*ulSlotWithTokenCount);
  rv =3D C_GetSlotList(TRUE,pSlotWithTokenList,&ulSlotWithTokenCount);
 =20
  //Open a R/W session with the specified token
  num=3D0;
  if(ulSlotWithTokenCount>1){
    cout<<"Wich token (0- "<<(ulSlotWithTokenCount-1)<<"): ";
    cin>>num;
    cout<<'\n';
  }
  C_OpenSession(pSlotWithTokenList[num],CKF_SERIAL_SESSION | =
CKF_RW_SESSION,NULL,NULL,&hSession);
  cout<<"R/W Session opened\n";
    =20
  //Login
  rv=3DC_Login(hSession,CKU_USER,(CK_CHAR *)user_pin,strlen(user_pin));
  cout<<"Login OK\n";
 =20
  //Generate KeyPair
  =
rv=3DC_GenerateKeyPair(hSession,&keyPair_mechanism,publicKeyTemplate,5,pr=
ivateKeyTemplate,8,&hPublicKey,&hPrivateKey);
       =20
  C_CloseSession(hSession);
 =20
  free(pSlotWithTokenList);
  rv=3D C_Finalize(NULL_PTR);
  ASSERT(rv=3D=3DCKR_OK,"C_Finalize failed!.\n");
 =20
  exit(0);
}


   It seems the easiest thing in the worl but this code doesn't work, or =
the sw token doesn't work. The log file reports this problem (look at =
the end):
   =20
/* C_Initialize(): ...complete (OK) */
/* C_GetSlotList(): starting... (OK) */
/* C_GetSlotList(): Listing only slots with present tokens (OK) */
DO_FKT(C_GetSlotList, (TRUE,(nil),0xbffff888));
/* C_GetSlotList(): computing needed size of List-Array (OK) */
/* C_GetSlotList(): starting... (OK) */
/* C_GetSlotList(): Listing only slots with present tokens (OK) */
DO_FKT(C_GetSlotList, (TRUE,0x804ab78,0xbffff888));
/* C_GetSlotList(): *pulCount: 1(OK) */
/* C_GetSlotList(): returning *pulCount: 1(OK) */
/* C_GetSlotList(): ...complete (OK) */
/* C_OpenSession(): starting... (OK) */
DO_FKT(C_OpenSession, (0,6,(nil),(nil),0xbffff880));
/* CI_Ceay_OpenSession(): starting... (OK) */
/* CI_Ceay_ReadPersistentFile(): starting... (OK) */
/* CDB_Open(): no further objects (OK) */
/* CI_Ceay_ReadPersistentFile(): ...complete (OK) */
/* CI_Ceay_OpenSession(): ...complete (OK) */
/* C_OpenSession(): for Session 2...complete(OK) */
/* C_Login(): starting... (OK) */
DO_FKT(C_Login, (2,1,<opaque PIN>,8));
/* CI_Ceay_Login(): starting... (OK) */
/* CI_Ceay_TokenObjLoad(): starting... (OK) */
/* CDB_Open(): no further objects (OK) */
/* CI_Ceay_TokenObjLoad(): ...complete (OK) */
/* CI_Ceay_Login(): complete... (OK) */
/* CI_PropagateSessionState(): starting... (OK) */
/* CI_PropagateSessionState(): setting state to 3 for session 2(OK) */
/* CI_PropagateSessionState(): ...done (OK) */
/* C_Login(): ...complete (OK) */
/* C_GenerateKeyPair(): starting... (OK) */
DO_FKT(C_GenerateKeyPair, (2,{CKM_RSA_PKCS_KEY_PAIR_GEN, NULL_PTR, =
0x00000000},((ENCRYPT 01: #x00000001)
 (VERIFY 01: #x00000001)
 (WRAP 01: #x00000001)
 (MODULUS_BITS 00:03:00:00: #x00000004)
 (PUBLIC_EXPONENT 03: #x00000001)
 ),5,((TOKEN 01: #x00000001)
 (PRIVATE 01: #x00000001)
 (SUBJECT 54:65:73:74:69:6e:67:20:6b:65:79:73: #x0000000c)
 (ID 31:32:33: #x00000003)
 (SENSITIVE 01: #x00000001)
 (DECRYPT 01: #x00000001)
 (SIGN 01: #x00000001)
 (UNWRAP 01: #x00000001)
 ),8,0xbffff870,0xbffff86c));
/* CI_ObjReadTemplate(): starting... (OK) */
/* CI_ObjReadTemplate(): ...complete (OK) */
/* CI_ObjReadTemplate(): starting... (OK) */
/* CI_ObjReadTemplate(): ...complete (OK) */
/* CI_Ceay_GenerateKeyPair(): starting... (OK) */
/* CI_Ceay_GenerateKeyPair(): warning: public key type not defined =
(TEMPLATE INCONSISTENT) */
/* CI_Ceay_GenerateKeyPair(): warning: private key type not defined =
(TEMPLATE INCONSISTENT) */
/* CI_ObjReadTemplate(): starting... (OK) */
/* CI_ObjReadTemplate(): ...complete (OK) */
/* CI_ObjReadTemplate(): starting... (OK) */
/* CI_ObjReadTemplate(): ...complete (OK) */
/* CI_Ceay_GeneratePair(): session_data is 0x804ab88(OK) */
/* CI_Ceay_RSA_Callback(): callback for prime suspected: 0(OK) */
/* CI_Ceay_RSA_Callback(): callback for prime suspected: 1(OK) */
/* CI_Ceay_RSA_Callback(): callback for prime suspected: 2(OK) */
/* CI_Ceay_RSA_Callback(): callback for prime suspected: 3(OK) */
/* CI_Ceay_RSA_Callback(): callback for prime suspected: 4(OK) */
/* CI_Ceay_RSA_Callback(): callback for prime rejected: 0(OK) */
/* CI_Ceay_RSA_Callback(): callback for prime suspected: 0(OK) */
/* CI_Ceay_RSA_Callback(): callback for prime suspected: 1(OK) */
/* CI_Ceay_RSA_Callback(): callback for prime suspected: 2(OK) */
/* CI_Ceay_RSA_Callback(): callback for prime suspected: 3(OK) */
/* CI_Ceay_RSA_Callback(): callback for prime suspected: 4(OK) */
/* CI_Ceay_RSA_Callback(): callback for prime rejected: 1(OK) */
/* CI_ObjMergeObj(): starting... (OK) */
/* CI_ObjMergeObj(): ...complete (OK) */
/* CI_ObjMergeObj(): starting... (OK) */
/* CI_ObjMergeObj(): ...complete (OK) */
/* CI_Ceay_GenerateKeyPair(): ...complete (OK) */
/* CI_TokenObjAdd(): starting... (OK) */
/* CI_Ceay_TokenObjAdd(): starting... (OK) */
/* CI_Ceay_TokenObjAdd(): cache already loaded =
(IMPL_DATA(persistent_cache): 0x804ac18(OK) */      <----- HERE


I tried also to store a certificate, but when the CI_Ceay_TokenObjAdd() =
is called, the problem is the same: "cache already loaded".
If you know how I can resolve this problem and complete my thesis I'll =
be very grateful with you.

Thank you in very much.

Calogero.=20
ca...@ti...

Re: [gpkcs11-dev] Able to perform operations even with login failure!

[Chai M. Y. <cmi...@ya...>]

Thanks for the reply. The reason I was testing the
library was because I am using CDSA with gpkcs11
plugin. I found out that it is possible to export the
private keys from the token even without loggining in
to the token using the CDSA functions. I am still
trying to narrow down the problem, but it seems to
originate from gpkcs11. 

To test the gpkcs11 library, I did the following:

1. Login.
2. Generate Key pair (RSA)
3. Generate Key Pair (RSA) to wrap the private key
generated in 2
4. Wrap_Key
5. Wrap_Key again to see if output is the same as 4
(would expect to be the same as 4)
6. Logout
7. Wrap_Key again to test if it fails. 

The operations for all of them are successful.
The wrapped key for 4,5 and 7 are different, though
the length returned is the same for all. It seems
strange to me that 4 and 5 are different (why ?). I
had wanted to compare 4 and 7 to see if they are
different (i.e. to test if logging out makes the
wrap_key fail (it doesn't! though the wrapped key
output is different). I added in step 5 to see if the
output is the same as 4 so I get some reassurance that
the output of 7 is not really the wraped private key
but some garbage even though the operation had been
successful.But it turns out that 4 and 5 are different
as well, so I am quite confused. Hence my question is:
1. Why is the output for 4 and 5 different ?
2. More importantly, why does operation 7 not fail
since I am trying to export a private key in a token
that I have logged out of?

Would appreciate any advice and help. Thanks.
--- Jean-Marc Desperrier
<jea...@ce...> wrote:
> Chai Ming Yao a dit :
> 
> >   I tested the gpkcs11 library and realise that
> even
> >in the case of login failure, I am able to perform
> >operations such as generate_key_pair and even more
> >surprisingly, wrapping private keys from the token.
> >
> This is normal pkcs#11 behaviour.
> 
> You do not have the right to access already existing
> objects, but you 
> are allowed to create a new session object and do
> whatever you want with 
> it without being logged.
> This object should be a temporary object that will
> be destroyed when the 
> session is over.
> I don't know if gpkcs11 respects that in all cases
> though and it could 
> be a security concern in some situation if the
> object is not destroyed, 
> and moreover if it looks like an valid secure key
> when you log later.
> I've already seen gpkcs11 not properly separate the
> object that are 
> created in two distinct session (Session B will see
> the objects created 
> by session A which it should not).
> 
> 
> 
> 
>
-------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> gpkcs11-dev mailing list
> gpk...@li...
>
https://lists.sourceforge.net/lists/listinfo/gpkcs11-dev


__________________________________________________
Do you Yahoo!?
New DSL Internet Access from SBC & Yahoo!
http://sbc.yahoo.com

[gpkcs11-dev] Windows compilation

[D T <fig...@ho...>]

Hi All,

        I need help with installing gpkcs in netscape with Linux. Also I 
haven't found why I cannot compile the soft token dll with Windows. So 
basically I am looking for guidelines to both problems if this would be 
possible for the mailing list to provide.

Derek

_________________________________________________________________
Send and receive Hotmail on your mobile device: http://mobile.msn.com

Re: [gpkcs11-dev] Able to perform operations even with login failure!

[Jean-Marc D. <jea...@ce...>]

Chai Ming Yao a dit :

>   I tested the gpkcs11 library and realise that even
>in the case of login failure, I am able to perform
>operations such as generate_key_pair and even more
>surprisingly, wrapping private keys from the token.
>
This is normal pkcs#11 behaviour.

You do not have the right to access already existing objects, but you 
are allowed to create a new session object and do whatever you want with 
it without being logged.
This object should be a temporary object that will be destroyed when the 
session is over.
I don't know if gpkcs11 respects that in all cases though and it could 
be a security concern in some situation if the object is not destroyed, 
and moreover if it looks like an valid secure key when you log later.
I've already seen gpkcs11 not properly separate the object that are 
created in two distinct session (Session B will see the objects created 
by session A which it should not).

[gpkcs11-dev] Able to perform operations even with login failure!

[Chai M. Y. <cmi...@ya...>]

Hi,

   I tested the gpkcs11 library and realise that even
in the case of login failure, I am able to perform
operations such as generate_key_pair and even more
surprisingly, wrapping private keys from the token. I
am not sure if there is an explanation for this
(something wrong the way I used it) or whether this
has been reported before, but it seemed like a serious
problem. Any advice would be much appreciated. Thank
you.

MY

__________________________________________________
Do you Yahoo!?
New DSL Internet Access from SBC & Yahoo!
http://sbc.yahoo.com

[gpkcs11-dev] Log.txt output

[D T <fig...@ho...>]

This is the output for the configure::

$ make
cd . && autoheader
WARNING: Using auxiliary files such as `acconfig.h', `config.h.bot'
WARNING: and `config.h.top', to define templates for `config.h.in'
WARNING: is deprecated and discouraged.

WARNING: Using the third argument of `AC_DEFINE' and
WARNING: `AC_DEFINE_UNQUOTED' allows to define a template without
WARNING: `acconfig.h':

WARNING:   AC_DEFINE([NEED_MAIN], 1,
WARNING:             [Define if a function `main' is needed.])

WARNING: More sophisticated templates can also be produced, see the
WARNING: documentation.
autoheader: `conf.h.in' is updated
touch ./conf.h.in
cd . && /bin/sh ./config.status conf.h
Usage: ./config.status [--recheck] [--version] [--help]
make: *** [stamp-h1] Error 1


-----------------------------------------------------------------------------------
$ ./configure
loading cache ./config.cache
checking host system type... i386-pc-cygwin32
checking target system type... i386-pc-cygwin32
checking build system type... i386-pc-cygwin32
checking for a BSD compatible install... (cached) /usr/bin/install -c
checking whether build environment is sane... yes
checking whether make sets ${MAKE}... (cached) yes
checking for working aclocal... found
checking for working autoconf... found
checking for working automake... found
checking for working autoheader... found
checking for working makeinfo... found
checking optimization settings... -g and -Wall enabled
checking optimization settings... disabled
checking debugging settings... no debugging
checking assertion settings... no assertions
Profiling disabled
checking for gcc... (cached) gcc
checking whether the C compiler (gcc -g -Wall  ) works... yes
checking whether the C compiler (gcc -g -Wall  ) is a cross-compiler... no
checking whether we are using GNU C... (cached) yes
checking whether gcc accepts -g... (cached) yes
checking how to run the C preprocessor... (cached) gcc -E
checking for a BSD compatible install... /usr/bin/install -c
checking whether ln -s works... (cached) yes
checking whether make sets ${MAKE}... (cached) yes
checking for ranlib... (cached) ranlib
checking for ANSI C header files... (cached) yes
checking for fcntl.h... (cached) yes
checking for limits.h... (cached) yes
checking for sgtty.h... (cached) no
checking for sys/file.h... (cached) yes
checking for sys/ioctl.h... (cached) yes
checking for sys/time.h... (cached) yes
checking for termio.h... (cached) yes
checking for unistd.h... (cached) yes
checking for working const... (cached) yes
checking for inline... (cached) inline
checking whether struct tm is in sys/time.h or time.h... (cached) time.h
checking for 8-bit clean memcmp... (cached) yes
checking return type of signal handlers... (cached) void
checking for vprintf... (cached) yes
checking for pthread.h... (cached) yes
checking for MAXSIG in signal.h... no
checking for _NSIG in signal.h... no
checking for ld used by GCC... (cached) /usr/i686-pc-cygwin/bin/ld.exe
checking if the linker (/usr/i686-pc-cygwin/bin/ld.exe) is GNU ld... 
(cached) y
s
checking for BSD-compatible nm... (cached) /usr/bin/nm -B
updating cache ./config.cache
loading cache ./config.cache within ltconfig
checking for object suffix... o
checking for gcc option to produce PIC... none
checking if gcc supports -c -o file.o... yes
checking if gcc supports -c -o file.lo... yes
checking if gcc supports -fno-rtti -fno-exceptions ... yes
checking if gcc static flag -static works... -static
checking if the linker (/usr/i686-pc-cygwin/bin/ld.exe) is GNU ld... yes
checking whether the linker (/usr/i686-pc-cygwin/bin/ld.exe) supports shared 
li
raries... yes
checking command to parse /usr/bin/nm -B output... ok
checking how to hardcode library paths into programs... immediate
checking for /usr/i686-pc-cygwin/bin/ld.exe option to reload object files... 
-r
checking dynamic linker characteristics... Win32 ld.exe
checking if libtool supports shared libraries... yes
checking if package supports dlls... no
checking whether to build shared libraries... no
checking whether to build static libraries... yes
checking for objdir... .libs
creating libtool
updating cache ./config.cache
loading cache ./config.cache
checking for socket... (cached) yes
checking guile base... threading deactivated
Selecting Token:
   ceay-token not used
   tcsc-token not used
   data-token not used
   *** No Token Selected! ***
checking PKCS-11 extension in OpenSSL... disabled
checking for javac... (cached) javac
updating cache ./config.cache
creating ./config.status
creating ./etc/Makefile
creating ./docs/Makefile
creating ./ceay_token/Makefile
creating ./cryptsh/Makefile
creating ./libgpkcs11/Makefile
creating ./Makefile
creating ./tests/Makefile
creating ./tests/config/Makefile
creating ./tests/gpkcs11.base/Makefile
creating conf.h
conf.h is unchanged
configuring in gdbm-1.8.0
running /bin/sh ./configure  --cache-file=.././config.cache --srcdir=.
loading cache .././config.cache
checking for gcc... (cached) gcc
checking whether the C compiler (gcc -g -Wall  -D_REENTRANT ) works... yes
checking whether the C compiler (gcc -g -Wall  -D_REENTRANT ) is a 
cross-compil
r... no
checking whether we are using GNU C... (cached) yes
checking whether gcc accepts -g... (cached) yes
checking how to run the C preprocessor... (cached) gcc -E
checking for a BSD compatible install... (cached) /usr/bin/install -c
checking host system type... i386-pc-cygwin32
checking for ranlib... (cached) ranlib
checking for ld used by GCC... (cached) /usr/i686-pc-cygwin/bin/ld.exe
checking if the linker (/usr/i686-pc-cygwin/bin/ld.exe) is GNU ld... 
(cached) y
s
checking for BSD-compatible nm... (cached) /usr/bin/nm -B
checking whether ln -s works... (cached) yes
checking for gcc option to produce PIC... -fPIC
checking if gcc PIC flag -fPIC works... no
checking if gcc static flag -static works... -static
checking if the linker (/usr/i686-pc-cygwin/bin/ld.exe) is GNU ld... yes
checking whether the linker (/usr/i686-pc-cygwin/bin/ld.exe) supports shared 
li
raries... yes
checking command to parse /usr/bin/nm -B output... no
checking how to hardcode library paths into programs... immediate
checking for /usr/i686-pc-cygwin/bin/ld.exe option to reload object files... 
-r
checking dynamic linker characteristics... no
checking if libtool supports shared libraries... no
checking whether to build shared libraries... no
checking whether to build static libraries... yes
checking for objdir... .libs
creating libtool
checking for working const... (cached) yes
checking for stdlib.h... (cached) yes
checking for string.h... (cached) yes
checking for sys/file.h... (cached) yes
checking for unistd.h... (cached) yes
checking for fcntl.h... (cached) yes
checking for sys/types.h... (cached) yes
checking for memory.h... (cached) yes
checking for main in -ldbm... (cached) no
checking for main in -lndbm... (cached) no
checking for rename... (cached) yes
checking for ftruncate... (cached) yes
checking for flock... (cached) no
checking for bcopy... (cached) yes
checking for fsync... (cached) yes
checking for getopt... (cached) yes
checking for ANSI C header files... (cached) yes
checking for off_t... (cached) yes
checking for st_blksize in struct stat... (cached) yes
updating cache .././config.cache
creating ./config.status
creating Makefile
creating autoconf.h
autoconf.h is unchanged



---------------------------------------------------------------------------------------
$ make
cd . && /bin/sh ./config.status conf.h
Usage: ./config.status [--recheck] [--version] [--help]
make: *** [stamp-h1] Error 1

adm-sica@PC-DESPONIA ~/gpkcs11-0.7.2
$ make install
Making install in gdbm-1.8.0
make[1]: Entering directory `/home/adm-sica/gpkcs11-0.7.2/gdbm-1.8.0'
./mkinstalldirs /usr/local/lib /usr/local/include /usr/local/man/man3
/info
/bin/sh ../libtool /usr/bin/install -c -c libgdbm.la /usr/local/lib/l
/usr/bin/install -c -c .libs/libgdbm.lai /usr/local/lib/libgdbm.la
/usr/bin/install -c -c .libs/libgdbm.a /usr/local/lib/libgdbm.a
ranlib /usr/local/lib/libgdbm.a
chmod 644 /usr/local/lib/libgdbm.a
---------------------------------------------------------------------
Libraries have been installed in:
   /usr/local/lib

If you ever happen to want to link against installed libraries
in a given directory, LIBDIR, you must either use libtool, and
specify the full pathname of the library, or use `-LLIBDIR'
flag during linking and do at least one of the following:
   - add LIBDIR to the `PATH' environment variable
     during execution
   - add LIBDIR to the `LD_RUN_PATH' environment variable
     during linking
   - use the `-Wl,--rpath -Wl,LIBDIR' linker flag

See any operating system documentation about shared libraries for
more information, such as the ld(1) and ld.so(8) manual pages.
---------------------------------------------------------------------
/usr/bin/install -c -m 644 gdbm.h /usr/local/include/gdbm.h
/usr/bin/install -c -m 644 ./gdbm.3 \
        /usr/local/man/man3/gdbm.3
/usr/bin/install -c -m 644 ./gdbm.info \
        /usr/local/info/gdbm.info
make[1]: Leaving directory `/home/adm-sica/gpkcs11-0.7.2/gdbm-1.8.0'
Making install in libgpkcs11
make[1]: Entering directory `/home/adm-sica/gpkcs11-0.7.2/libgpkcs11'
Makefile:243: *** missing separator.  Stop.
make[1]: Leaving directory `/home/adm-sica/gpkcs11-0.7.2/libgpkcs11'
make: *** [install-recursive] Error 1

_________________________________________________________________
MSN Photos is the easiest way to share and print your photos: 
http://photos.msn.com/support/worldwide.aspx

[gpkcs11-dev] (no subject)

[D T <fig...@ho...>]

Hi All,

I am having problems with make. I have done everything listed on the README. 
The ./configure gives me a few no's when
it comes to checking for cross compiling and if there is a -fPIC option on 
gcc. I am using cygwin with all the
nessesary binaries and source. I am really stuck. Also I cant get the latest 
with command line cvs the CVSROOT seems
to be not working.

Attached is the output for the configure and the make error. I guess I need 
to work with the configure options but I
need some pointers.Any help?

error.c is the main problem but I couldn't manage to use NO_LOGGING or 
NO_MEM_LOGGING

different errors have appeared so I can appreciate any info.

Derek



_________________________________________________________________
Join the world’s largest e-mail service with MSN Hotmail. 
http://www.hotmail.com