You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
p11-kit: call to C_GetInterface failed in module: /usr/lib64/pkcs11/../../lib/libCryptoki2_64.so: This operation is not supported
I have a module that exports C_GetInterfaceList and C_GetInterface and returns 0x54, so p11-kit-proxy will error out.
RFE: In this case could we still fallback to C_GetFunctionList like pkcs11-spy or make this configurable.
The module works when wrapped by pkcs11-spy, though which seems to be more forgiving.
The module in question is Luna HSM v10.5.
When p11-kit calls C_GetInterface it checks for CKR_OK, perhaps it could also check for CKR_FUNCTION_NOT_SUPPORTED and bail out to C_GetFunctionList in that case.
The text was updated successfully, but these errors were encountered:
space88man
changed the title
[Question] How to handle an older module with C_GetInterface returning 0x54 - fallback possible ?
[RFE] Bad module with C_GetInterface returning 0x54 - fallback to C_GetFunctionList
Feb 20, 2024
I have a module that exports C_GetInterfaceList and C_GetInterface and returns 0x54, so p11-kit-proxy will error out.
RFE: In this case could we still fallback to C_GetFunctionList like pkcs11-spy or make this configurable.
The module works when wrapped by pkcs11-spy, though which seems to be more forgiving.
The module in question is Luna HSM v10.5.
When p11-kit calls C_GetInterface it checks for CKR_OK, perhaps it could also check for CKR_FUNCTION_NOT_SUPPORTED and bail out to C_GetFunctionList in that case.
The text was updated successfully, but these errors were encountered: