[Cryptech Tech] Generating keys on alpha using pkcs11-tool

Peter Stuge peter at stuge.se
Mon Nov 21 14:04:13 UTC 2016


Rob Austein wrote:
> > What would your recommended next step for debugging be?
> 
> I would not put serious effort into debugging that version, it's far
> enough behind the current development code that it'd be wasted
> effort.  The keystore has completely changed,

Also on device?


> and I'm currently in the
> process of getting rid of the SQL database entirely (not there yet).

Sounds good! How? What's the replacement? Where was the design discussion?

Is it pretty much the filesystem that was discussed a while back?


> From your description, though, it may be something as simple as the
> SQL database not being writable by the user account that's running
> this test, so I'd check for that first.

This is a good hint. One easy way to debug "local" issues would be to
strace -fF pkcs11-tool and see what comes out. (Maybe also -o out.txt)


//Peter


More information about the Tech mailing list