Perhaps you could try running pk11util in the debugger and set a break point right before trying your first pkcs11 operation? ----- Original Message ----- From: "Kevin Reinholz" <kreinholz@xxxxxxxxx> To: Coolkey-devel@xxxxxxxxxx Sent: Tuesday, June 8, 2010 11:17:02 PM GMT -08:00 US/Canada Pacific Subject: Re: Cool-Key on Solaris Still hitting a brick wall. On 04/28/10 10:19 AM, Kevin Reinholz wrote: According to this link ( https://rhn.redhat.com/errata/RHBA-2010-0068.html ), there were some recent bug fixes introduced into Coolkey. However, the source listed and linked to here ( http://www.directory.fedora.redhat.com/wiki/CoolKey ) is version 1.1.0 from 2007... Are there more up-to-date sources available for Coolkey? The Jan 2010 bug fix advisory mentioning version 1.1.0-14 for RHEL referenced two bugs that would probably cause similar symptoms to what I'm experiencing on OpenSolaris: https://bugzilla.redhat.com/show_bug.cgi?id=245529 https://bugzilla.redhat.com/show_bug.cgi?id=443127 Are there more up-to-date sources I should be attempting to build and install Coolkey from? Found bug fix patches for coolkey-1.1.0 here: ftp://gd.tuwien.ac.at/opsys/linux/fedora/linux/releases/13/Everything/source/SRPMS/ (Any Fedora mirror with source rpms should work). Downloaded the file: coolkey-1.1.0-14.fc13.src.rpm There are 5 patches included along with a tar.gz archive of the coolkey-1.1.0 source. I manually applied the patches and did the Solaris 10 workarounds (adding a few lines regarding MAP_FILE to src/coolkey/machdep.cpp and deleting the blank line 19 from src/coolkey/coolkeypk11.def Then I built coolkey the same way I've been doing on OpenSolaris: env LIBUSB_CLFAGS="-I/usr/include" LIBUSB_LIBS="-L/usr/lib -lusb" PCSC_CFLAGS=-I/usr/local/include/PCSC PCSC_LIBS="-L/usr/local/lib -lpcsclite" ./configure --sysconfdir=/etc --prefix=/usr/local make pfexec make install Unfortunately Firefox still complains that it is unable to add libcoolkeypk11.so as a security module. I tried to initialize libcoolkeypk11.so with pk11util: /usr/local/bin/pk11util pkcs11> C_Initialize /usr/local/lib/pkcs11/libcoolkeypk11.so >> Error : CKR_CRYPTOKI_NOT_INITIALIZED Segmentation Fault (core dumped) Doesn't look encouraging. On 04/20/10 10:22 AM, Kevin Reinholz wrote: On 04/20/10 10:03 AM, John Magne wrote: Yeah it sounds like maybe the module is not getting hit. Have you tried doing the ldd on the module file to see if there are any missing dependencies? reinholz@etrenank:~$ ldd /usr/local/lib/pkcs11/libcoolkeypk11.so libckyapplet.so.1 => /usr/local/lib/libckyapplet.so.1 libdl.so.1 => /lib/libdl.so.1 libz.so.1 => /lib/libz.so.1 libstdc++.so.6 => /usr/sfw/lib/libstdc++.so.6 libm.so.2 => /lib/libm.so.2 libgcc_s.so.1 => /usr/sfw/lib/libgcc_s.so.1 libc.so.1 => /lib/libc.so.1 The same exact libs show as linked to libcoolkeypk11.so after compiling the patched version. Nothing jumps out as missing.. thanks, jack ----- Original Message ----- From: "Kevin Reinholz" <kreinholz@xxxxxxxxx> To: Coolkey-devel@xxxxxxxxxx Sent: Monday, April 19, 2010 5:39:22 PM GMT -08:00 US/Canada Pacific Subject: Re: Cool-Key on Solaris On 04/20/10 01:30 AM, John Magne wrote: Here is something to try. Before starting firefix, set this variable: COOL_KEY_LOG_FILE=/tmp/cool.log Then start firefox in the same terminal. After the module load fails, you can see if there is something in the log file. I tried by doing the following: export COOL_KEY_LOG_FILE=/tmp/cool.log firefox& Then attempting to add /usr/local/lib/pkcs11/libcoolkeypk11.so as a Security Module in Firefox. Unfortunately, the log file was empty/not created, implying my error is very early in the loading process(?) Same as before, attempting to create a coolkey log file before launching Firefox resulted in no file being created... I've built pk11util so with some examples I can run some tests on libcoolkeypk11.so using pk11util. Thanks for your help! Kevin _______________________________________________ I'm out of ideas unless anyone has additional suggestions. It looks like the differences between Solaris 10 and OpenSolaris are preventing coolkey from giving me any love. Coolkey-devel mailing list Coolkey-devel@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/coolkey-devel _______________________________________________ Coolkey-devel mailing list Coolkey-devel@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/coolkey-devel _______________________________________________ Coolkey-devel mailing list Coolkey-devel@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/coolkey-devel
