Your message dated Wed, 23 Aug 2023 14:14:22 +0200
with message-id <[email protected]>
and subject line Re: Bug#826165: opensc-pkcs11: Signing fails with: PKCS11 
function C_SignFinal failed: rv = CKR_GENERAL_ERROR (0x5)
has caused the Debian Bug report #826165,
regarding opensc-pkcs11: Signing fails with: PKCS11 function C_SignFinal 
failed: rv = CKR_GENERAL_ERROR (0x5)
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
826165: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=826165
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: opensc-pkcs11
Version: 0.16.0~rc2-1
Severity: important

Dear Maintainer,

I use an OmniKey CardMan 6121 with Firefox to access my bank's website. 

This used to work last time I checked (around May 20). However, Firefox now 
returns the following error message:


A PKCS #11 module returned CKR_GENERAL_ERROR, indicating that an
unrecoverable error has occurred. Error code:
SEC_ERROR_PKCS11_GENERAL_ERROR


The following blog post describes exactly the issue I am having, although it 
pertains to an older version of opensc-pkcs11:

https://www.tablix.org/~avian/blog/archives/2013/10/opensc_on_wheezy/

Testing with pkcs11-tool as described in the blog post above yields this:


$ pkcs11-tool --module /usr/lib/x86_64-linux-gnu/opensc-pkcs11.so -t -l
Using slot 0 with a present token (0x0)
Logging in to "[...]".
Please enter User PIN: 
C_SeedRandom() and C_GenerateRandom():
  seeding (C_SeedRandom) not supported
  seems to be OK
Digests:
  all 4 digest functions seem to work
  MD5: OK
  SHA-1: OK
  RIPEMD160: OK
Signatures (currently only RSA signatures)
  testing key 0 ([...]) 
error: PKCS11 function C_SignFinal failed: rv = CKR_GENERAL_ERROR (0x5)

Aborting.


The opensc-pkcs11.so file was last updated on May 28 (I apt-get upgrade daily):


-rw-r--r-- 1 root root 207888 May 28 06:24 
/usr/lib/x86_64-linux-gnu/opensc-pkcs11.so


Please let me know if I can provide any additional information or help in any 
way. 


-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.4.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages opensc-pkcs11 depends on:
ii  libc6        2.22-10
ii  libssl1.0.2  1.0.2h-1
ii  zlib1g       1:1.2.8.dfsg-2+b1

opensc-pkcs11 recommends no packages.

opensc-pkcs11 suggests no packages.

-- no debconf information

P.S. Thank you for all you do!

--- End Message ---
--- Begin Message ---
You have to limit max_{send,recv}_size to a size that fits your CCID driver.
OpenSC cannot do anything about it.

--- End Message ---

Reply via email to