Re: Cannot perform signing when multiple keys are present

I think I have the root cause, which lies completely elsewhere. Apparently
Yubikey driver doesn't install properly on this machine. Normally you
Yubikey is visible in Device Manager under Smart cards section as "Identity
Device (NIST SP 800-73 [PIV])". On that machine I see "Unknown Smart Card"
(see attached screenshots). I don't know yet why is it so, but this is out
of scope for this group I guess. Sorry, I was so mislead with the fact
there are two tokens and that other tools does see Yubikey that I didn't
even thought of checking it. Only the empty list from p11tool and together
with Douglas pointing other tools are not use PKCS#11 module triggered
finally the thought check it.

For completeness, here is the debug output from p11tool:

>\gnutls-3.4.9\bin\p11tool.exe --provider c:\Windows\System32\opensc-pkcs11.dll
 --list-tokens
(p11-kit:2992) p11_library_init: initializing library
(p11-kit:2992) p11_kit_module_load: in: c:\Windows\System32\opensc-
pkcs11.dll
(p11-kit:2992) load_module_from_file_inlock: loading module from path:
c:\Windows\System32\opensc-pkcs11.dll
(p11-kit:2992) dlopen_and_get_function_list: opened module:
c:\Windows\System32\opensc-pkcs11.dll
(p11-kit:2992) p11_kit_module_load: out: success
(p11-kit:2992) p11_kit_module_release: in
(p11-kit:2992) p11_kit_module_release: out
(p11-kit:2992) uninit_common: uninitializing library

Thank you,
Marcin Okraszewski


On Thu, Dec 15, 2016 at 9:08 PM, David Woodhouse <[email protected]>
wrote:

> On Thu, 2016-12-15 at 19:18 +0100, Marcin Okraszewski wrote:
> >
> > It provides no output, there. So, it looks like the p11 doesn't see
> > the token at all (while other tools does). Removing the other token
> > doesn't help too.
>
> Sounds like your PKCS#11 provider module is installed without a
> corresponding p11-kit .module file to let applications know where to
> find it automatically.
>
> That is unfortunately the case even on poorly-maintained Linux
> distributions; it's not surprising that it's the case on Windows.
> You'll probably have to make the .module file manually.
>
> https://p11-glue.freedesktop.org/doc/p11-kit/pkcs11-conf.html
> --
> dwmw2

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most 
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

_______________________________________________
Opensc-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/opensc-devel