[Cryptech Tech] pkcs11-proxy 32/64

Linus Nordberg linus at nordberg.se
Sun Jul 19 14:25:21 UTC 2015


Hi,

I've been debugging the problem we experienced on Friday with running
the pkcs11-proxy client on a 64-bit machine. I've begun to wonder what a
good indication of failure might be.

Let me start by asking whether working/non-working "ods-hsmutil test"
should be a good indication of success or not? It does seem to generate
a key, extract it, sign using it and finally delete it.

--8<---------------cut here---------------start------------->8---
$ PKCS11_PROXY_SOCKET="tcp://<my-novena>:<port>" ~/usr/bin/ods-hsmutil test Novena
Testing repository: Novena

Generating 512-bit RSA key... Failed
generate key pair: CKR_FUNCTION_FAILED

Generating 768-bit RSA key... Failed
generate key pair: CKR_FUNCTION_FAILED

Generating 1024-bit RSA key... OK
Extracting key identifier... OK, 14c7c7d80e0f1d6c2e1b83ef5f78f2e4
Signing (RSA/SHA1) with key... OK
Signing (RSA/SHA256) with key... OK
Signing (RSA/SHA512) with key... OK
Deleting key... OK

^C
--8<---------------cut here---------------end--------------->8---


More information about the Tech mailing list