search for: cka_class

...N_INITIALIZED Returned: 0 CKR_OK 6: C_OpenSession 2014-01-28 03:26:42.353 [in] slotID = 0x0 [in] flags = 0x6 pApplication=(nil) Notify=(nil) [out] *phSession = 0x3c60002 Returned: 0 CKR_OK 7: C_FindObjectsInit 2014-01-28 03:26:42.353 [in] hSession = 0x3c60002 [in] pTemplate[1]: CKA_CLASS CKO_PUBLIC_KEY Returned: 0 CKR_OK 8: C_FindObjects 2014-01-28 03:26:42.353 [in] hSession = 0x3c60002 [in] ulMaxObjectCount = 0x1 [out] ulObjectCount = 0x1 Object 0x8690003 matches Returned: 0 CKR_OK 9: C_GetAttributeValue 2014-01-28 03:26:42.353 [in] hSession = 0x3c60002 [in]...

...true at maybe_expand_array Sep 13 10:42:04 ip-10-0-40-230 dovecot: auth: Error: p11-kit: shouldn't be reached at p11_array_push Sep 13 10:42:04 ip-10-0-40-230 dovecot: auth: Error: p11-kit: shouldn't be reached at sink_object Sep 13 10:42:04 ip-10-0-40-230 dovecot: auth: Error: p11-kit: no CKA_CLASS attribute found Sep 13 10:42:04 ip-10-0-40-230 dovecot: auth: Error: p11-kit: couldn't load file into objects: /usr/share/pki/ca-trust-source/ca-bundle.trust.p11-kit Sep 13 10:42:05 ip-10-0-40-230 dovecot: auth-worker: Error: p11-kit: 'attrs != NULL' not true at attrs_build Sep 13 10:42...

Hi list, I have no idea if Damien Miller had the time to work on that. I have an initial patch to authenticate using PKCS#11 and ECDSA keys. This requires OpenSSL 1.0.2, prior OpenSSL versions do not expose the required interfaces to override the signature function pointer for ECDSA. The only limitation is that the OpenSSL API misses some cleanup function (finish, for instance), hence I have yet