Bugzilla Bug 198688

Hello,
Please mark stable.
Thanks!

ppc stable

amd64 done

How do you test this?  Examples are not helpful, no tests provided, and it
can't load anything (for me) from sys-auth/pam_pkcs11,  engine_pkcs11,
pkcs11-helper, itself, ... and gnupg-pkcs11-scd has no sparc keyword.  It
builds and does not abort on the examples, but?  (home page is not helpful.)

By the way, 
pkg-config --libs libp11
-lp11
(correct)

polylepis examples # pkg-config --cflags libp11

polylepis examples #
(wrong! I hope.  It build with correct CFLAGS, but a user relying on what
pkg-config reports will not be happy.)

No sparc for now --- not enough information to get a clue whether it works or
not.

x86 stable

Ferris, you can check it using pam_p11 as it has libp11 in depend.

Hello Ferris,

Most packages that put their files in default /usr/include returns empty string
as --cflags.

You can use:
sys-auth/pam_p11
dev-libs/engine_pkcs11

To test this.
I think the engine_pkcs11 is the simplest one...
http://www.opensc-project.org/engine_pkcs11/wiki/QuickStart

Thanks!

(In reply to comment #6)
> Hello Ferris,
> 
> Most packages that put their files in default /usr/include returns empty string
> as --cflags.
> 
> You can use:
> sys-auth/pam_p11
> dev-libs/engine_pkcs11
> 
> To test this.
> I think the engine_pkcs11 is the simplest one...
> http://www.opensc-project.org/engine_pkcs11/wiki/QuickStart
> 
> Thanks!
> 

I'm very slow today, I guess,  Every example I can find wants me to use this
module:  /usr/lib/opensc-pkcs11.so, but I have no file opensc-pkcs11.so
anywhere at all on the system.  And nothing I try will do anything without that
module or its equivalent someplace.  (libp11 itself has a few examples, all of
which need that module, and the URL to opensc-project.org has examples assuming
that module is lying around someplace.  But it isn't.)

Do you have any PKCS#11 provider on your system? The opensc-pkcs11.so is only a
default.
If you use engine_pkcs11 you can use MODULE_PATH:/usr/lib/XXX to override.
If you use pam_p11 you can use auth       required   pam_p11_opensc.so
/usr/lib/XXX to override.

The whole point of PKCS#11 is that it is as well-known interface that allows
you to use different modules.

(In reply to comment #8)
> Do you have any PKCS#11 provider on your system? The opensc-pkcs11.so is only a
> default.
> If you use engine_pkcs11 you can use MODULE_PATH:/usr/lib/XXX to override.
> If you use pam_p11 you can use auth       required   pam_p11_opensc.so
> /usr/lib/XXX to override.
> 
> The whole point of PKCS#11 is that it is as well-known interface that allows
> you to use different modules.
> 

OK, I have:
  dev-libs/libp11-0.2.3
  dev-libs/engine_pkcs11-0.1.4
  pam_pkcs11-0.6.0
installed.

Now, none of these supplies anything that can be used as a module.  What does,
and what would it be called?  So far, I can't test this at all.

I guess you don't have smartcard on your disposal... You cannot test this
without smartcard... :)

this was stabilized on a lot of arches without it being tested, so ia64/sparc
stable. Alpha doesn't have it stable

ppc64 stable

hppa stable