Thank you very much @Seyeongkim and @mruffell for the SRU review! I have been looking through the past few days at the cause of the DSA failures and I have finally figured out the issue. The frustrating thing is that the official PKCS11 standard is kind of vague on this, but the short answer is that the attribute CKA_SENSITIVE is marked as true (CKA_TRUE) meaning that I cannot read the CK_VALUE from DSA private keys. The value of CKA_SENSITIVE is let to the vendor to decide and it seems that softhsm (The implementation that I am using for these tests) sets it to true causing these issues. I have written a patch locally that I will then push upstream before going ahead with a new round for the SRU process.
Thank you again for catching this! I wish the PKCS11 standard was more clear on when CKA_SENSITIVE is enabled as it would have avoided me running into this issue with my original upstream implementation. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2150202 Title: p11tool returns duplicate entries when pkcs URIs are the same for multiple pkcs11 objects To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnutls28/+bug/2150202/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
