On 8 sep 2010, at 10.38, Gilles Massen wrote:

> #bin/ods-hsmutil test keyper
> Testing repository: keyper
> 
> Generating 512-bit RSA key...
> answer.GetCall(KEYGEN2) failed; error 1208Failed
> hsm_get_slot_id(): could not find token with the name My Token 1
> [...]
> 
> 'My Token 1' is a token associated with the repository 'softHSM', not
> 'keyper'. The fail is correct for the keyper, though (512 bit not
> supported).

It should now be fixed in r4005 in trunk.

The problem was that the function hsm_get_slot_id() returns 0 upon an error. 
But 0 is a valid slot id and the calling function continues and connects to 
slot 0. In your case there was probably a slot 0 in SoftHSM, and the 
initialization process went well. The error message from hsm_get_slot_id() was 
still stored in the context and then read back when you hit the second error. 
Which should have been about the key generation failure.

Now the initialization process returns an error if a token is not found.

// Rickard

_______________________________________________
Opendnssec-user mailing list
[email protected]
https://lists.opendnssec.org/mailman/listinfo/opendnssec-user

Reply via email to