Re: GnuTLS | p11tool stopped showing token (#1774)

Read-only notification of GnuTLS library development activities <[email protected]>
Newsgroups gmane.comp.encryption.gpg.gnutls.devel
Message-ID <[email protected]>


Alexander Travov commented on a discussion: https://gitlab.com/gnutls/gnutls/-/issues/1774#note_2962697672


Adding logs from old and new versions with p11-kit debug logs enabled. Maybe it will shed some light

old version:

```
P11_KIT_DEBUG=all GNUTLS_DEBUG_LEVEL=5 p11tool --provider=/usr/lib/librtpkcs11ecp.so --list-token-urls -d 9
(p11-kit:3417) p11_library_init_impl: initializing library
gnutls[2]: Enabled GnuTLS 3.8.3 logging...
gnutls[2]: getrandom random generator was selected
gnutls[2]: Intel SSSE3 was detected
gnutls[2]: Intel SHA was detected
gnutls[2]: Intel AES accelerator was detected
gnutls[2]: Intel GCM accelerator (AVX) was detected
gnutls[2]: cfg: disabling version tls1.0
gnutls[2]: cfg: disabling version tls1.1
gnutls[2]: cfg: disabling version dtls0.9
gnutls[2]: cfg: disabling version dtls1.0
gnutls[2]: cfg: loaded system config /etc/gnutls/config mtime 1709575231
Setting log level to 9
(p11-kit:3417) p11_kit_module_load: in: /usr/lib/librtpkcs11ecp.so
(p11-kit:3417) load_module_from_file_inlock: loading module from path: /usr/lib/librtpkcs11ecp.so
(p11-kit:3417) dlopen_and_get_function_list: C_GetInterface not available. Falling back to C_GetFunctionList()
(p11-kit:3417) dlopen_and_get_function_list: opened module: /usr/lib/librtpkcs11ecp.so
(p11-kit:3417) p11_kit_module_load: out: success
|<2>| p11: Initializing module: /usr/lib/librtpkcs11ecp.so
(p11-kit:3417) managed_C_Initialize: in
(p11-kit:3417) initialize_module_inlock_reentrant: C_Initialize: calling
(p11-kit:3417) initialize_module_inlock_reentrant: C_Initialize: result: 0
(p11-kit:3417) managed_C_Initialize: out: 0
|<2>| p11: No login requested.
pkcs11:model=Rutoken%20ECP;manufacturer=Aktiv%20Co.;serial=XXXXXXX;token=XXXXXXXXXXXXX
|<2>| p11: No login requested.
|<3>| ASSERT: ../../lib/pkcs11.c[find_token_num_cb]:2352
|<3>| ASSERT: ../../lib/pkcs11.c[_gnutls_pkcs11_token_get_url]:2432
(p11-kit:3417) managed_C_Finalize: in
(p11-kit:3417) managed_C_Finalize: out: 0
(p11-kit:3417) p11_kit_module_release: in
(p11-kit:3417) p11_kit_module_release: out
(p11-kit:3417) uninit_common: uninitializing library
```

new version

```
P11_KIT_DEBUG=all GNUTLS_DEBUG_LEVEL=5 p11tool --provider=/usr/lib/librtpkcs11ecp.so --list-token-urls -d 9
(p11-kit:19048) p11_library_init_impl: initializing library
gnutls[2]: Enabled GnuTLS 3.8.11 logging...
gnutls[2]: getrandom random generator was selected
gnutls[2]: Intel SSSE3 was detected
gnutls[2]: Intel AES accelerator was detected
gnutls[2]: Intel GCM accelerator (AVX) was detected
gnutls[2]: cfg: disabling version tls1.0
gnutls[2]: cfg: disabling version tls1.1
gnutls[2]: cfg: disabling version dtls0.9
gnutls[2]: cfg: disabling version dtls1.0
gnutls[2]: cfg: loaded system config /etc/gnutls/config mtime 1765814046
Setting log level to 9
(p11-kit:19048) p11_kit_module_load: in: /usr/lib/librtpkcs11ecp.so
(p11-kit:19048) load_module_from_file_inlock: loading module from path: /usr/lib/librtpkcs11ecp.so
(p11-kit:19048) dlopen_and_get_function_list: C_GetInterface not available. Falling back to C_GetFunctionList()
(p11-kit:19048) dlopen_and_get_function_list: opened module: /usr/lib/librtpkcs11ecp.so
(p11-kit:19048) p11_kit_module_load: out: success
|<2>| p11: Initializing module: (null)
(p11-kit:19048) managed_C_Initialize: in
(p11-kit:19048) initialize_module_inlock_reentrant: C_Initialize: calling
(p11-kit:19048) initialize_module_inlock_reentrant: C_Initialize: result: 9
(p11-kit:19048) managed_C_Initialize: out: 9
|<3>| ASSERT: ../../lib/pkcs11.c[pkcs11_provider_init]:301
(p11-kit:19048) p11_kit_module_release: in
(p11-kit:19048) p11_kit_module_release: out
|<3>| ASSERT: ../../lib/pkcs11.c[gnutls_pkcs11_add_provider]:503
pkcs11_add_provider: Thread locking error
(p11-kit:19048) uninit_common: uninitializing library
```

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/issues/1774#note_2962697672
You're receiving this email because of your account on gitlab.com.

_______________________________________________
Gnutls-devel mailing list
[email protected]
http://lists.gnupg.org/mailman/listinfo/gnutls-devel
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.