[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: pkinit/opensc/soft-pkcs11

To: "Matthew N. Andrews" <matt@slackers.net>
Subject: Re: pkinit/opensc/soft-pkcs11
From: Love Hörnquist Åstrand <lha@kth.se>
Date: Wed, 05 Oct 2005 16:19:57 +0200
Cc: heimdal-discuss@sics.se
In-Reply-To: <434329B9.9090401@slackers.net> (Matthew N. Andrews's messageof "Tue, 04 Oct 2005 18:17:45 -0700")
References: <434329B9.9090401@slackers.net>
Sender: owner-heimdal-discuss@sics.se
User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/22.0.50 (darwin)

"Matthew N. Andrews" <matt@slackers.net> writes:

> I get the following error:
> kinit: krb5_get_init_creds: Can't decrypt key: error:2A008404:PKCS11
> library:PKCS11_rsa_decrypt:Not supported

Isn't this because its not supported in the opensc pkcs11 engine ?

Try using DH instead (kinit --pkinit-use-dh), that will only work with
current Heimdal.

Love

PGP signature

Follow-Ups:
- Re: pkinit/opensc/soft-pkcs11
  - From: Matthew Andrews <matt@slackers.net>

References:
- pkinit/opensc/soft-pkcs11
  - From: "Matthew N. Andrews" <matt@slackers.net>

Prev by Date: Re: Pre-Expired Passwords
Next by Date: Re: pkinit/opensc/soft-pkcs11
Prev by thread: Re: pkinit/opensc/soft-pkcs11
Next by thread: Re: pkinit/opensc/soft-pkcs11
Index(es):
- Date
- Thread