Pam_pkcs11 ca_dir not working

Hi all,

I'm unable to authenticate sudo against a smart card when checking the CA.
Sudo authenticates with SUCCESS with:
cert_policy = signature;
When I set:
cert_policy = ca,signature;
I get the error:
ERROR:pkcs11_inspect.c:137: verify_certificate() failed: certificate is
invalid: unable to get local issuer certificate

Obviously, in the /etc/pam_pkcs11/cacerts there are the CA certificates in
der and pem format (hash linked with pkcs11_make_hash_link).

Thank you very much for your help.
Mario


System info:
Ubuntu Desktop 13.10 with stock pam_pkcs11
ca_dir = /etc/pam_pkcs11/cacerts; (in /etc/pam_pkcs11/pam_pkcs11.conf)
use_mappers = pwent (in /etc/pam_pkcs11/pam_pkcs11.conf)
Added this line in /etc/pam.d/sudo: auth sufficient pam_pkcs11.so

_______________________________________________
Muscle mailing list
[email protected]
http://lists.musclecard.com/mailman/listinfo/muscle_lists.musclecard.com