Bug 198688 - dev-libs/libp11-0.2.3 stable request
Bug#: 198688 Product:  Gentoo Linux Version: unspecified Platform: All
OS/Version: Linux Status: RESOLVED Severity: enhancement Priority: P2
Resolution: FIXED Assigned To: crypto@gentoo.org Reported By: alonbl@gentoo.org
Component: Ebuilds
URL: 
Summary: dev-libs/libp11-0.2.3 stable request
Keywords:  STABLEREQ
Status Whiteboard: 
Opened: 2007-11-10 14:39 0000
Description:   Opened: 2007-11-10 14:39 0000
Hello,
Please mark stable.
Thanks!

------- Comment #1 From nixnut 2007-11-10 16:09:33 0000 -------
ppc stable

------- Comment #2 From Samuli Suominen 2007-11-10 21:06:29 0000 -------
amd64 done

------- Comment #3 From Ferris McCormick 2007-11-10 22:02:23 0000 -------
How do you test this?  Examples are not helpful, no tests provided, and it
can't load anything (for me) from sys-auth/pam_pkcs11,  engine_pkcs11,
pkcs11-helper, itself, ... and gnupg-pkcs11-scd has no sparc keyword.  It
builds and does not abort on the examples, but?  (home page is not helpful.)

By the way, 
pkg-config --libs libp11
-lp11
(correct)

polylepis examples # pkg-config --cflags libp11

polylepis examples #
(wrong! I hope.  It build with correct CFLAGS, but a user relying on what
pkg-config reports will not be happy.)

No sparc for now --- not enough information to get a clue whether it works or
not.

------- Comment #4 From Dawid Węgliński 2007-11-11 04:28:30 0000 -------
x86 stable

------- Comment #5 From Dawid Węgliński 2007-11-11 04:35:25 0000 -------
Ferris, you can check it using pam_p11 as it has libp11 in depend.

------- Comment #6 From Alon Bar-Lev (RETIRED) 2007-11-11 05:46:03 0000 -------
Hello Ferris,

Most packages that put their files in default /usr/include returns empty string
as --cflags.

You can use:
sys-auth/pam_p11
dev-libs/engine_pkcs11

To test this.
I think the engine_pkcs11 is the simplest one...
http://www.opensc-project.org/engine_pkcs11/wiki/QuickStart

Thanks!

------- Comment #7 From Ferris McCormick 2007-11-11 15:09:03 0000 -------
(In reply to comment #6)
> Hello Ferris,
> 
> Most packages that put their files in default /usr/include returns empty string
> as --cflags.
> 
> You can use:
> sys-auth/pam_p11
> dev-libs/engine_pkcs11
> 
> To test this.
> I think the engine_pkcs11 is the simplest one...
> http://www.opensc-project.org/engine_pkcs11/wiki/QuickStart
> 
> Thanks!
> 

I'm very slow today, I guess,  Every example I can find wants me to use this
module:  /usr/lib/opensc-pkcs11.so, but I have no file opensc-pkcs11.so
anywhere at all on the system.  And nothing I try will do anything without that
module or its equivalent someplace.  (libp11 itself has a few examples, all of
which need that module, and the URL to opensc-project.org has examples assuming
that module is lying around someplace.  But it isn't.)

------- Comment #8 From Alon Bar-Lev (RETIRED) 2007-11-12 05:15:03 0000 -------
Do you have any PKCS#11 provider on your system? The opensc-pkcs11.so is only a
default.
If you use engine_pkcs11 you can use MODULE_PATH:/usr/lib/XXX to override.
If you use pam_p11 you can use auth       required   pam_p11_opensc.so
/usr/lib/XXX to override.

The whole point of PKCS#11 is that it is as well-known interface that allows
you to use different modules.

------- Comment #9 From Ferris McCormick 2007-11-12 13:16:03 0000 -------
(In reply to comment #8)
> Do you have any PKCS#11 provider on your system? The opensc-pkcs11.so is only a
> default.
> If you use engine_pkcs11 you can use MODULE_PATH:/usr/lib/XXX to override.
> If you use pam_p11 you can use auth       required   pam_p11_opensc.so
> /usr/lib/XXX to override.
> 
> The whole point of PKCS#11 is that it is as well-known interface that allows
> you to use different modules.
> 

OK, I have:
  dev-libs/libp11-0.2.3
  dev-libs/engine_pkcs11-0.1.4
  pam_pkcs11-0.6.0
installed.

Now, none of these supplies anything that can be used as a module.  What does,
and what would it be called?  So far, I can't test this at all.


------- Comment #10 From Alon Bar-Lev (RETIRED) 2007-11-12 17:36:15 0000 -------
I guess you don't have smartcard on your disposal... You cannot test this
without smartcard... :)

------- Comment #11 From Raúl Porcel 2007-11-13 17:46:19 0000 -------
this was stabilized on a lot of arches without it being tested, so ia64/sparc
stable. Alpha doesn't have it stable

------- Comment #12 From Markus Rothe 2007-11-13 18:22:56 0000 -------
ppc64 stable

------- Comment #13 From Guy Martin 2008-10-31 21:52:22 0000 -------
hppa stable