openvpn in Rocky/RHEL 10.1 with YKCS11 provider
Nobody has claimed this yet.
- Dominant language
- C
- Stars
- 14.6k
- Forks
- 3.4k
- PR merge metrics
- No merged PRs in 30d
Description
Describe the bug
Hello. Currently, I have a libykcs11.so.2.7.2 file that I built using the Rocky 10.1 OS. However, when I attempt to use openvpn with it, using the following command:
openvpn --show-pkcs11-ids libykcs11.so.2.7.2
I get the following error:
PKCS#11: Adding PKCS#11 provider 'libykcs11.so.2.7.2'
PKCS#11: Cannot initialize provider 'libykcs11.so.2.7.2' 6-'CKR_FUNCTION_FAILED'
Failed to add PPKCS#11 provider 'libykcs11.so.2.7.2
Exiting due to fatal error
I am wondering if this has something to do with openvpn in Rocky 10.1, or if it is entirely an issue with the pkcs11 provider.
To Reproduce
Build the Yubico libykcs11.so.2.7.2 from the yubico-piv-tool. Use the following command:
openvpn --show-pkcs11-ids libykcs11.so.2.7.2
Expected behavior
It should print out the pkcs11 ids of my yubikey
Version information (please complete the following information):
- OS: Rocky 10.1
- OpenVPN version: 2.7_rc2 x86_64-redhat-linux-gnu
Additional context
The same command works on Rocky 9.6, with the same pkcs11 provider
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by running openvpn --show-pkcs11-ids libykcs11.so.2.7.2 with the Yubico provider on Rocky 10.1 and compare it with Rocky 9.6. The issue is complete when the failure is attributed to OpenVPN or the PKCS#11 provider and the expected YubiKey PKCS#11 IDs can be retrieved, with supporting reproduction details.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- c, linux
- Domain
- networking, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100