Re: Cool-Key on Solaris

[Kevin Reinholz <kreinholz@xxxxxxxxx>]

Still hitting a brick wall.

On 04/28/10 10:19 AM, Kevin Reinholz wrote:

According to this link (https://rhn.redhat.com/errata/RHBA-2010-0068.html), there were some recent bug fixes introduced into Coolkey. However, the source listed and linked to here (http://www.directory.fedora.redhat.com/wiki/CoolKey) is version 1.1.0 from 2007...

Are there more up-to-date sources available for Coolkey? The Jan 2010 bug fix advisory mentioning version 1.1.0-14 for RHEL referenced two bugs that would probably cause similar symptoms to what I'm experiencing on OpenSolaris:

https://bugzilla.redhat.com/show_bug.cgi?id=245529

https://bugzilla.redhat.com/show_bug.cgi?id=443127

Are there more up-to-date sources I should be attempting to build and install Coolkey from?

Found bug fix patches for coolkey-1.1.0 here:

ftp://gd.tuwien.ac.at/opsys/linux/fedora/linux/releases/13/Everything/source/SRPMS/

(Any Fedora mirror with source rpms should work).

Downloaded the file:

coolkey-1.1.0-14.fc13.src.rpm

There are 5 patches included along with a tar.gz archive of the coolkey-1.1.0 source.

I manually applied the patches and did the Solaris 10 workarounds (adding a few lines regarding MAP_FILE to src/coolkey/machdep.cpp and deleting the blank line 19 from src/coolkey/coolkeypk11.def

Then I built coolkey the same way I've been doing on OpenSolaris:

env LIBUSB_CLFAGS="-I/usr/include" LIBUSB_LIBS="-L/usr/lib -lusb" PCSC_CFLAGS=-I/usr/local/include/PCSC PCSC_LIBS="-L/usr/local/lib -lpcsclite" ./configure --sysconfdir=/etc --prefix=/usr/local

make

pfexec make install

Unfortunately Firefox still complains that it is unable to add libcoolkeypk11.so as a security module.

I tried to initialize libcoolkeypk11.so with pk11util:

/usr/local/bin/pk11util
pkcs11> C_Initialize /usr/local/lib/pkcs11/libcoolkeypk11.so
>> Error : CKR_CRYPTOKI_NOT_INITIALIZED
Segmentation Fault (core dumped)

Doesn't look encouraging.

On 04/20/10 10:22 AM, Kevin Reinholz wrote:

On 04/20/10 10:03 AM, John Magne wrote:

Yeah it sounds like maybe the module is not getting hit.

Have you tried doing the ldd on the module file to see if there are any missing dependencies?
  

reinholz@etrenank:~$ ldd /usr/local/lib/pkcs11/libcoolkeypk11.so
    libckyapplet.so.1 =>     /usr/local/lib/libckyapplet.so.1
    libdl.so.1 =>     /lib/libdl.so.1
    libz.so.1 =>     /lib/libz.so.1
    libstdc++.so.6 =>     /usr/sfw/lib/libstdc++.so.6
    libm.so.2 =>     /lib/libm.so.2
    libgcc_s.so.1 =>     /usr/sfw/lib/libgcc_s.so.1
    libc.so.1 =>     /lib/libc.so.1

The same exact libs show as linked to libcoolkeypk11.so after compiling the patched version.

Nothing jumps out as missing..

thanks,
jack

----- Original Message -----
From: "Kevin Reinholz"<kreinholz@xxxxxxxxx>
To: Coolkey-devel@xxxxxxxxxx
Sent: Monday, April 19, 2010 5:39:22 PM GMT -08:00 US/Canada Pacific
Subject: Re: Cool-Key on Solaris

On 04/20/10 01:30 AM, John Magne wrote:
  

Here is something to try.

Before starting firefix, set this variable:

COOL_KEY_LOG_FILE=/tmp/cool.log

Then start firefox in the same terminal.

After the module load fails, you can see if there is something in the log file.

    

I tried by doing the following:

export COOL_KEY_LOG_FILE=/tmp/cool.log
firefox&

Then attempting to add /usr/local/lib/pkcs11/libcoolkeypk11.so as a
Security Module in Firefox. Unfortunately, the log file was empty/not
created, implying my error is very early in the loading process(?)

Same as before, attempting to create a coolkey log file before launching Firefox resulted in no file being created...

I've built pk11util so with some examples I can run some tests on
libcoolkeypk11.so using pk11util.

Thanks for your help!

Kevin

_______________________________________________

I'm out of ideas unless anyone has additional suggestions. It looks like the differences between Solaris 10 and OpenSolaris are preventing coolkey from giving me any love.

Coolkey-devel mailing list
Coolkey-devel@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/coolkey-devel
  

_______________________________________________
Coolkey-devel mailing list
Coolkey-devel@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/coolkey-devel