Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 04 Aug 2017 01:13:12 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-ports-bugs@FreeBSD.org
Subject:   [Bug 221212] security/softhsm2 uses hard-coded data-directories
Message-ID:  <bug-221212-13@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D221212

            Bug ID: 221212
           Summary: security/softhsm2 uses hard-coded data-directories
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: freebsd-ports-bugs@FreeBSD.org
          Reporter: dewayne@heuristicsystems.com.au
                CC: jaap@NLnetLabs.nl
             Flags: maintainer-feedback?(jaap@NLnetLabs.nl)
                CC: jaap@NLnetLabs.nl

Thank-you for upgrading softhsm2.  Without changing anything, the software
functions on FreeBSD 11.1Stable for both i386 and amd64.
However if the directories.tokendir changes from the default in softhsm2.co=
nf,
this results on both platforms:

# softhsm2-util --init-token --free --label "Cute label" --so-pin abcdef --=
pin
123456
ERROR: Could not initialize the PKCS#11 library/module:
/usr/local/lib/softhsm/libsofthsm2.so
ERROR: Please check log files for additional information.

(Aside: there was no logging information)

In our case we prefer
directories.tokendir =3D /var/lib/softhsm/tokens/

We tried changes in the Makefile around
STATE_DIR?=3D     /var                            # Previously /usr/local/v=
ar
TOKEN_DIR?=3D     ${STATE_DIR}/lib/softhsm/tokens # Used in pkg-plist

CONFIGURE_ARGS+=3D        --datarootdir=3D${TOKEN_DIR} --localstatedir=3D${=
STATE_DIR}
but were unsuccessful.

Why it matters? Once built and functional /usr is mounted read-only.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-221212-13>