On 03.12.2016 13:50, Nathaniel McCallum wrote: > So apparently yubico-piv-tool ships $libdir/libykpkcs11.so*, but this > doesn't get picked up by p11-kit by default. I suspect it has gone > unnoticed largely because for most crucial operations the opensc > module also works with Yubikeys. However, this is not true for all > operations (in particular, in my case, key creation). > > How can we make this happen? Is there some intentional reason Yubico's > PKCS#11 module has been excluded?
p11-kit doesn't look hopefully across the whole system looking for possible PKCS#11 modules :D There's a drop in file that helps p11-kit find it: https://p11-glue.freedesktop.org/doc/p11-kit/pkcs11-conf.html Typically these drop in files are distributed along with the module in an RPM or Deb file. So that may be your first stop for filing a bug: The package in the distro you're using that shipped the above .so file. Hope that makes sense, Stef
signature.asc
Description: OpenPGP digital signature
_______________________________________________ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org
