[opencryptoki-users] problem with CEX3 on linux s390 64 bit

[Simon M. <smc...@au...>]

Hi,

I am chasing a problem with an application that cannot see the slots 
through an opencryptoki lib for a CEX3 smart card implementation. Other 
applications work fine with it so the smart card and opencryptoki lib work 
fine most of the time with other apps on the same platform. When this 
particular application asks for the slot list it gets told there are no 
slots.

Here is a trace of the calls made (all are returning CKR_OK btw) :
->C_GetFunctionList(ppFunctionList=0x80e4ae90)
  Size-Of(FunctionList)    : 552,  Size-Of(CK_VERSION) : 2
  Size-Of(FunctionListPart): 550,  Size-Of(1 Function) : 8, # Functions: 
68
->C_Initialize(pInitArgs=0xffca55b0)
        CreateMutex: (nil), DestroyMutex (nil), LockMutex (nil), 
UnlockMutex: (nil)
        flags 0x2, pReserved (nil)
->C_GetInfo(pInfo=0xffca5558)
 ** INFO  ** cryptokiVersion V 2.11
 ** INFO  ** libraryVersion V 2.2
 ** INFO  ** flags 0x0
 ** INFO  ** libraryDescription Meta PKCS11 LIBRARY 
 ** INFO  ** manufacturerID IBM 
->C_GetSlotList(onlyPresentTokens?=0, pSlotList=0x0, pSlotCount=0xffca5d18 
[0])
 ** WARN  ** No slots returned!

So it doesn't get very far. Other applications when traced return 1 slot 
and continue normally like this:

->C_GetSlotList(onlyPresentTokens?=0, pSlotList=0x0, pSlotCount=0xfff150b8 
[0])
 ** INFO  ** count=1
->C_GetSlotList(onlyPresentTokens?=0, pSlotList=0x80023500, 
pSlotCount=0xfff150b8 [1])
 ** INFO  ** count=1
 ** INFO  ** slotId=0
->C_GetSlotInfo(slotID=0, pSlotInfo=0xfff14f20)
...

The apps that work are pretty simple apps that only link to the p11 lib. 
The one that fails links to a shared lib which then loads the p11 lib. 
They both use "dlopen(libPath, RTLD_NOW|RTLD_GLOBAL);" to load the lib. 
There are no prior calls to the p11 lib other than what is in the traces 
above.

So I am a bit stumped as to what the difference might be that causes this. 
I'm just wondering how to debug it further. I.e. what opencryptoki 
trace/logging capability is there and how to switch it on on the Linux 
s390 platform?

Thanks,

Simon McMahon
IBM