Re: [opencryptoki-users] pkcsconf looking for token in wrong directory

[Kent Y. <shp...@gm...>]

Hi Mauro,

On Wed, May 23, 2012 at 5:11 PM, Mauro Rodrigues
<mau...@li...> wrote:
> Hello everyone!
>
> I'm building opencryptoki from git's master branch as described below:
>
> ./configure --prefix=/usr --enable-debug --enable-testcases
> make
> make install
>
> With CCA, TPM and Software tokens enabled successfully.
> Then I ran 'pkcs11_startup' and 'pkcsslotd start' also successfully, but
> when I tried to get token information for example with 'pkcsconf -t' it
> returned me the follow message:
>
> C_GetSlotList returned 0 slots. Check that your tokens are installed
> correctly.
>
>
> With Rajiv's help we figured out a build error: pkcsconf looks for the
> token in the wrong directory, we saw that running:
>
> strace pkcsconf -t 2>&1 | grep swtok
> stat("/var/lib/opencryptoki/swtok", 0x7ffff05c5fe0) = -1 ENOENT (No such
> file or directory)
>
> The token exists in /usr/var/lib/opencryptoki/swtok instead of the
> directory above.

  Ah yes, it looks like in pkcs11_startup.in, @localstatedir@ is used
instaed of @CONFIG_DIR@, which is used everywhere else.  This only
bites us when $prefix has a value from configure.

> For now I did a symbolic link as workarround, but Rajiv advised me to
> report it as a bug in this list.

  Yes, thanks for the report!

Kent

> I didn't prepare a patch to solve this problem cause I have doubts what
> is the right way to do it (by change pkcs_slot script or in another file
> where it's defined, which I believe is
> usr/lib/pkcs11/soft_stdll/tok_struct.h but I didn't have time to do a
> deeper analysis).
>
> Thanks!
>
> Mauro S M Rodrigues
>
>
> ------------------------------------------------------------------------------
> Live Security Virtual Conference
> Exclusive live event will cover all the ways today's security and
> threat landscape has changed and how IT managers can respond. Discussions
> will include endpoint security, mobile security and the latest in malware
> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
> _______________________________________________
> opencryptoki-users mailing list
> ope...@li...
> https://lists.sourceforge.net/lists/listinfo/opencryptoki-users



-- 
IBM LTC Security