opencryptoki breaks p11-kit
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
opencryptoki (Ubuntu) |
Confirmed
|
Undecided
|
Unassigned | ||
p11-kit (Ubuntu) |
Confirmed
|
Undecided
|
Unassigned |
Bug Description
When opencryptoki is installed, it creates a symlink from /etc/pkcs11 to /var/lib/
This means that anything using p11-kit to find the PKCS#11 modules which are configured to be available in the system (which is basically any well-behaved application) now breaks:
$ openconnect -c 'pkcs11:
POST https:/
Attempting to connect to server [fec0::1]:443
p11-kit: couldn't open config file: /etc/pkcs11/
Error loading certificate from PKCS#11: PKCS #11 initialization error.
Loading certificate failed. Aborting.
$ p11tool --list-tokens
p11-kit: couldn't open config file: /etc/pkcs11/
pkcs11_init: PKCS #11 initialization error.
Status changed to 'Confirmed' because the bug affects multiple users.