Public bug reported:
Binary package hint: openvpn
When using openvpn with an Aladdin eToken then whole system hangs. I can
reproduce this by simply entering
openvpn --show-pkcs11-ids /usr/lib/opensc-pkcs11.so as root. This works
flawlessly on Ubuntu 10.10 and before. Opensc seems to read the eToken quite
fine:
root@mb-VirtualBox:/usr/share/doc/openvpn# opensc-tool -l
[opensc-tool] reader-pcsc.c:906:pcsc_detect_readers: SCardEstablishContext
failed: 0x8010001d
[opensc-tool] reader-pcsc.c:1015:pcsc_detect_readers: returning with: No
readers found
Readers known about:
Nr. Driver Name
0 openct Aladdin eToken PRO
1 openct OpenCT reader (detached)
root@mb-VirtualBox:/usr/share/doc/openvpn# opensc-tool -n
[opensc-tool] reader-pcsc.c:906:pcsc_detect_readers: SCardEstablishContext
failed: 0x8010001d
[opensc-tool] reader-pcsc.c:1015:pcsc_detect_readers: returning with: No
readers found
Using reader with a card: Aladdin eToken PRO
CardOS M4
And pkcs11-tool can see the certs on the eToken:
root@mb-VirtualBox:/usr/share/doc/openvpn# pkcs11-tool -O
[opensc-pkcs11] reader-pcsc.c:906:pcsc_detect_readers: SCardEstablishContext
failed: 0x8010001d
[opensc-pkcs11] reader-pcsc.c:1015:pcsc_detect_readers: returning with: No
readers found
[opensc-pkcs11] reader-pcsc.c:906:pcsc_detect_readers: SCardEstablishContext
failed: 0x8010001d
[opensc-pkcs11] reader-pcsc.c:1015:pcsc_detect_readers: returning with: No
readers found
Certificate Object, type = X.509 cert
label: /C=DE/ST=NA/O=Company/CN=mb/emailAddress=michael.b...@domain.de
ID: 45
Public Key Object; RSA 1024 bits
label: /C=DE/ST=NA/O=Company/CN=mb/emailAddress=michael.b...@domain.de
ID: 45
Usage: encrypt, verify
Certificate Object, type = X.509 cert
label:
/C=DE/ST=NA/L=MUEHLHEIM-KAERLICH/O=Company/CN=VPN-CA/emailAddress=michael.b...@domain.de
ID: 00
Public Key Object; RSA 1024 bits
label:
/C=DE/ST=NA/L=MUEHLHEIM-KAERLICH/O=Company/CN=VPN-CA/emailAddress=michael.b...@domain.de
ID: 46
Usage: encrypt, verify
ProblemType: Bug
DistroRelease: Ubuntu 11.04
Package: openvpn 2.1.3-2ubuntu3
ProcVersionSignature: Ubuntu 2.6.38-8.42-generic 2.6.38.2
Uname: Linux 2.6.38-8-generic x86_64
Architecture: amd64
Date: Sun Jun 19 17:22:11 2011
InstallationMedia: Ubuntu 11.04 "Natty Narwhal" - Release amd64 (20110427.1)
ProcEnviron:
LANGUAGE=de_DE:en
LANG=de_DE.UTF-8
SHELL=/bin/bash
SourcePackage: openvpn
UpgradeStatus: No upgrade log present (probably fresh install)
** Affects: openvpn (Ubuntu)
Importance: Undecided
Status: New
** Tags: amd64 apport-bug natty unity-2d
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openvpn in Ubuntu.
https://bugs.launchpad.net/bugs/799448
Title:
openvpn hangs system with etoken
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openvpn/+bug/799448/+subscriptions
--
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
