Re: pkinit with smartcard

[Olga Kornievskaia <aglo@citi.umich.edu>]

here's what gdb says:

(gdb) run  --pk-use-enckey -C PKCS11:/usr/local/acgold/lib/libpkcs11.so 
aglo@HEIMDAL.CITI.UMICH.EDU
Starting program: /usr/heimdal/bin/kinit --pk-use-enckey -C 
PKCS11:/usr/local/acgold/lib/libpkcs11.so aglo@HEIMDAL.CITI.UMICH.EDU
Reading symbols from shared object read from target memory...done.
Loaded system supplied DSO at 0x2fc000
[Thread debugging using libthread_db enabled]
[New Thread -1208092992 (LWP 3140)]
PIN code for ActivCard USB Reader 2.0 (60102419) 00 00:
pkcs11 module release while session in use

Program received signal SIGABRT, Aborted.
[Switching to Thread -1208092992 (LWP 3140)]
0x002fc402 in __kernel_vsyscall ()
(gdb) where
#0  0x002fc402 in __kernel_vsyscall ()
#1  0x49bbfee9 in raise () from /lib/libc.so.6
#2  0x49bc14f1 in abort () from /lib/libc.so.6
#3  0x005cf623 in _hx509_abort (fmt=Could not find the frame base for 
"_hx509_abort".
) at cert.c:91
#4  0x005d95a0 in p11_release_module (p=0x9359388) at ks_p11.c:963
#5  0x005d96e2 in p11_free (certs=0x9359350, data=0x9359388) at 
ks_p11.c:1012
#6  0x005d6b3f in hx509_certs_free (certs=0x9356328) at keyset.c:129
#7  0x0028b067 in _krb5_get_init_creds_opt_free_pkinit (opt=0x93562c8)
    at pkinit.c:1850
#8  0x0027b7c8 in krb5_get_init_creds_opt_free (context=0x9356008,
    opt=0x93562c8) at init_creds.c:142
#9  0x0804a0b6 in get_new_tickets (context=0x9356008, principal=0x9356268,
    ccache=0x9357290, ticket_life=0, interactive=1) at kinit.c:631
#10 0x0804b327 in main (argc=Cannot access memory at address 0xc44
) at kinit.c:892

Love Hörnquist Åstrand wrote:
> Hello Olga,
>
> I can't reprodunce the problem using my software pkcs11 module
> so I need some more infomation to track the problem.
>
> What backtrace you get and can you tell me anything special
> about your environment.
>
> Love
>
>
> 11 dec 2006 kl. 06.21 skrev Olga Kornievskaia:
>
>> thanks. the patch solved the seg fault problem. now i'm seeing the 
>> following message:
>> pkcs11 module release while session in use
>> Abort
>>
>> any ideas as to what is going on?
>>
>> Love Hörnquist Åstrand wrote:
>>> Please try the attached patch. The pkcs11 code ever set a default 
>>> sig alg
>>> (it really needs to be sig alg_s, but that will have to change 
>>> later), that made
>>> the supportedCMStypes code explode.
>>>
>>> Love
>>>
>>> ------------------------------------------------------------------------ 
>>>
>>>
>>> Index: crypto.c
>>> ===================================================================
>>> RCS file: 
>>> /afs/pdc.kth.se/src/packages/kth-krb/SourceRepository/lib/hx509/crypto.c,v 
>>>
>>> retrieving revision 1.60
>>> retrieving revision 1.61
>>> diff -u -p -u -w -r1.60 -r1.61
>>> --- lib/hx509/crypto.c    6 Dec 2006 10:23:14 -0000    1.60
>>> +++ lib/hx509/crypto.c    9 Dec 2006 12:56:34 -0000    1.61
>>> @@ -1264,6 +1264,7 @@ _hx509_private_key_assign_rsa(hx509_priv
>>>      if (key->private_key.rsa)
>>>      RSA_free(key->private_key.rsa);
>>>      key->private_key.rsa = ptr;
>>> +    key->signature_alg = oid_id_pkcs1_sha1WithRSAEncryption();
>>>      key->md = &pkcs1_rsa_sha1_alg;
>>>  }
>>>
>>> ------------------------------------------------------------------------ 
>>>
>>>
>>>
>
>