gnome-keyring-pkcs11.so needs split out for multiarch

[Marc Deslauriers]

Every time I start wine, I get loads of these (even though it seems to work fine):

p11-kit: couldn't load module: /usr/lib/i386-linux-gnu/pkcs11/gnome-keyring-pkcs11.so: /usr/lib/i386-linux-gnu/pkcs11/gnome-keyring-pkcs11.so: cannot open shared object file: No such file or directory

Is there a dependency missing somewhere?

ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: wine1.4 1.4-0ubuntu1
ProcVersionSignature: Ubuntu 3.2.0-18.29-generic 3.2.9
Uname: Linux 3.2.0-18-generic x86_64
ApportVersion: 1.94.1-0ubuntu2
Architecture: amd64
Date: Sat Mar 17 10:31:01 2012
InstallationMedia: Ubuntu 11.04 "Natty Narwhal" - Alpha amd64 (20110302)
SourcePackage: wine1.4
UpgradeStatus: Upgraded to precise on 2012-01-03 (73 days ago)

[Scott Ritchie (scottritchie)]

I think this comes indirectly via Wine's use of gnutls. Should it be a dependency of that library instead?

[Scott Ritchie (scottritchie)]

Some quick googling shows that libgnutls26 should indeed pull in p11-kit http://lists.gnu.org/archive/html/gnutls-devel/2011-09/msg00004.html

[Scott Ritchie (scottritchie)]

Ugh it seems like p11-kit isn't in main but gnutls26 is. Does p11-kit need to be promoted?

[Scott Ritchie (scottritchie)]

On further testing it seems like the warnings are generated whether or not p11-kit is installed.

[Steve Langasek (vorlon)]

This has nothing to do with the p11-kit binary package. The message is from libp11-kit0, which parses the information in /etc/pkcs11/modules/ for a list of pkcs11 modules to load. gnome-keyring ships /etc/pkcs11/modules/gnome-keyring-module, which registers gnome-keyring-pkcs11.so; but this module is only available for the host arch, which in this case is amd64. Since wine is running as a 32-bit binary, it would need the 32-bit version of the pkcs module available.

Which means that gnome-keyring needs to be split as a multiarch package in order to solve this.

[Steve Langasek (vorlon)]

Marking as "low" priority since this module almost certainly isn't needed for anything in wine aside from suppressing the error message; which we don't want to do directly in libp11-kit0 because it's a real bug.

[Jerram (jerramw)]

Hi guys.

I am also getting this error in ubuntu 12.04 with wine_1.4-0ubuntu4_amd64.

<snip>
p11-kit: couldn't load module: /usr/lib/i386-linux-gnu/pkcs11/gnome-keyring-pkcs11.so: /usr/lib/i386-linux-gnu/pkcs11/gnome-keyring-pkcs11.so: cannot open shared object file: No such file or directory
</snip>

Wine seems to run ok too. However when I try to access an SSL endpoint with an untrusted certificate, I get the error below.

More annoyingly I also get it when trying to log into Evernote, which returns an error that it cannot access the internet, and so I cant log in.

I cant work this one out, are these issues related?

<snip>
fixme:win:AnimateWindow partial stub
fixme:win:AnimateWindow partial stub
fixme:wininet:INET_QueryOption INTERNET_OPTION_CONNECTED_STATE: semi-stub
fixme:wininet:InternetAttemptConnect Stub
fixme:wininet:InternetSetOptionW Option INTERNET_OPTION_CONNECT_TIMEOUT (60000): STUB
fixme:wininet:InternetSetOptionW INTERNET_OPTION_SEND/RECEIVE_TIMEOUT/DATA_SEND_TIMEOUT 60000
fixme:wininet:InternetSetOptionW INTERNET_OPTION_SEND/RECEIVE_TIMEOUT/DATA_SEND_TIMEOUT 300000
err:wininet:NETCON_secure_connect SSL_connect failed: 12157
</snip>

Any help much appreciated

[Scott Ritchie (scottritchie)]

If you could test the app in a 32-bit VM with Wine installed it would answer the question decisively.

[Mekk (marcin-kasperski)]

There is at least one case in which this module seems to be needed in wine:
    wine PLINK.EXE
does not support key-based authentication anymore since I upgraded to Ubuntu 12.04.

Where I used to succesfully login via key, now I get aforementioned warning and password prompt. AMD64 machine.

$ wine PLINK.EXE -v marcin@platon
Looking up host "platon"
Connecting to 192.168.1.2 port 22
Server version: SSH-2.0-OpenSSH_5.9p1 Debian-5ubuntu1
Using SSH protocol version 2
We claim version: SSH-2.0-PuTTY_Release_0.61
Doing Diffie-Hellman group exchange
Doing Diffie-Hellman key exchange with hash SHA-256
Host key fingerprint is:
ssh-rsa 2048 77:37:25:8b:8f:71:1f:7b:9c:63:2f:68f8:b1:e5:a3
Initialised AES-256 SDCTR client->server encryption
Initialised HMAC-SHA1 client->server MAC algorithm
Initialised AES-256 SDCTR server->client encryption
Initialised HMAC-SHA1 server->client MAC algorithm
Using username "marcin".
p11-kit: couldn't load module: /usr/lib/i386-linux-gnu/pkcs11/gnome-keyring-pkcs11.so: /usr/lib/i386-linux-gnu/pkcs11/gnome-keyring-pkcs11.so: cannot open shared object file: No such file or directory
marcin@platon's password:

(in case somebody is curious, I use plink to provide ssh-based remote services to some wine apps, one of cases is running remote chess engine over ssh for wine chess gui)

[Nicholas (nicholasotley)]

nik@MacBookPro4:~$ sudo apt-get install gnome-keyring:i386
Reading package lists... Done
Building dependency tree
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies.
 gnome-keyring:i386 : Depends: libgck-1-0:i386 (>= 3.3.90) but it is not going to be installed
                      Depends: libgcr-3-1:i386 (>= 3.4.0-0ubuntu1~precise1) but it is not going to be installed
E: Unable to correct problems, you have held broken packages.

I can install FLStudio 10 with wine but it won't run as it needs the 32bit gnome-keyring to be installed.