i.MX ProcessorsのトピックRe: pkcs11_add_provider: PKCS #11 error.

pkcs11_add_provider: PKCS #11 error.

pawar_123_y — Wed, 24 Nov 2021 10:29:01 GMT

Hello,

I am getting "pkcs11_add_provider: PKCS #11 error." while using p11tool --provider=/usr/lib/softhsm/libsofthsm2.so --list-tokens command

Thanks

Re: pkcs11_add_provider: PKCS #11 error.

Yuri — Thu, 25 Nov 2021 03:50:58 GMT

@pawar_123_y
Hello,

please let me know in more details how to reproduce the issue.

Regards,
Yuri.

Re: pkcs11_add_provider: PKCS #11 error.

pawar_123_y — Thu, 25 Nov 2021 11:42:36 GMT

Thanks Yuri for replay. i solved that problem with sudo access.

I am trying to "Push certificate & key to HSM" using "p11tool --provider /usr/lib/softhsm/libsofthsm2.so --login --write " pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=1e28cce1f77ad0c7;token=CST-HSM-1234" --load-privkey keys/CSF1_1_sha256_2048_65537_v3_usr_key.pem --label CSF1_1_sha256_2048_65537_v3_usr --id 1000 " this command.

it ask for PIN : accepted pin which i have set.

it ask for Password : I have not set any password here,so i was not getting which password it need.i tried with my system password but it didn't work.

Log is as follows:

Token '' with URL 'key:' requires user PIN
Enter PIN:
Enter password:
importing --load-privkey: keys/CSF1_1_sha256_2048_65537_v3_usr_key.pem: Decryption has failed.

can you please help me with this.

For pushing certificate it didn't ask for password. it needed PIN only.

Re: pkcs11_add_provider: PKCS #11 error.

Yuri — Mon, 06 Dec 2021 06:50:07 GMT

@pawar_123_y
Hello,

Have You followed all instructions, starting with "Installation" of Code-Signing
Tool – HSM User’s Guide (HSM-CST_UG.pdf) ?

Regards,
Yuri.

Re: pkcs11_add_provider: PKCS #11 error.

pawar_123_y — Mon, 06 Dec 2021 08:28:23 GMT

Hello Yuri,

I am following same document which you are referring i.e HSM-CST_UG.pdf and CST_UG.pdf from doc section of CST tool.

I have come to know, if i use add_key.sh to add keys to HSM it works fine and if i use command to push private key separately then i am facing error.

log as follows:

SoftHSM2
Private Key
$

p11tool --provider /usr/lib/softhsm/libsofthsm2.so --login --write "pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=700e507653035dfa;token=AHAB_Demo" --load-privkey ../keys/SRK1_sha384_secp384r1_v3_ca_key.pem --label SRK1_sha384_secp384r1_v3_ca_key --id 1000
Token '' with URL 'key:' requires user PIN
Enter PIN:
Enter password:

Correct me if i am wrong.

Thank you.

Re: pkcs11_add_provider: PKCS #11 error.

Yuri — Wed, 29 Dec 2021 05:16:28 GMT

@pawar_123_y
Hello,

Also :

https://community.nxp.com/t5/i-MX-Processors/what-password-i-need-while-pushing-private-key-to-hsm/m-p/1378655

Regards,
Yuri.