[gnutls-devel] GnuTLS | p11tool stopped showing token (#1774)
Read-only notification of GnuTLS library development activities
gnutls-devel at lists.gnutls.org
Thu Dec 18 11:41:07 CET 2025
Alexander Travov commented on a discussion: https://gitlab.com/gnutls/gnutls/-/issues/1774#note_2962697672
Adding logs from old and new versions with p11-kit debug logs enabled. Maybe it will shed some light
old version:
```
P11_KIT_DEBUG=all GNUTLS_DEBUG_LEVEL=5 p11tool --provider=/usr/lib/librtpkcs11ecp.so --list-token-urls -d 9
(p11-kit:3417) p11_library_init_impl: initializing library
gnutls[2]: Enabled GnuTLS 3.8.3 logging...
gnutls[2]: getrandom random generator was selected
gnutls[2]: Intel SSSE3 was detected
gnutls[2]: Intel SHA was detected
gnutls[2]: Intel AES accelerator was detected
gnutls[2]: Intel GCM accelerator (AVX) was detected
gnutls[2]: cfg: disabling version tls1.0
gnutls[2]: cfg: disabling version tls1.1
gnutls[2]: cfg: disabling version dtls0.9
gnutls[2]: cfg: disabling version dtls1.0
gnutls[2]: cfg: loaded system config /etc/gnutls/config mtime 1709575231
Setting log level to 9
(p11-kit:3417) p11_kit_module_load: in: /usr/lib/librtpkcs11ecp.so
(p11-kit:3417) load_module_from_file_inlock: loading module from path: /usr/lib/librtpkcs11ecp.so
(p11-kit:3417) dlopen_and_get_function_list: C_GetInterface not available. Falling back to C_GetFunctionList()
(p11-kit:3417) dlopen_and_get_function_list: opened module: /usr/lib/librtpkcs11ecp.so
(p11-kit:3417) p11_kit_module_load: out: success
|<2>| p11: Initializing module: /usr/lib/librtpkcs11ecp.so
(p11-kit:3417) managed_C_Initialize: in
(p11-kit:3417) initialize_module_inlock_reentrant: C_Initialize: calling
(p11-kit:3417) initialize_module_inlock_reentrant: C_Initialize: result: 0
(p11-kit:3417) managed_C_Initialize: out: 0
|<2>| p11: No login requested.
pkcs11:model=Rutoken%20ECP;manufacturer=Aktiv%20Co.;serial=XXXXXXX;token=XXXXXXXXXXXXX
|<2>| p11: No login requested.
|<3>| ASSERT: ../../lib/pkcs11.c[find_token_num_cb]:2352
|<3>| ASSERT: ../../lib/pkcs11.c[_gnutls_pkcs11_token_get_url]:2432
(p11-kit:3417) managed_C_Finalize: in
(p11-kit:3417) managed_C_Finalize: out: 0
(p11-kit:3417) p11_kit_module_release: in
(p11-kit:3417) p11_kit_module_release: out
(p11-kit:3417) uninit_common: uninitializing library
```
new version
```
P11_KIT_DEBUG=all GNUTLS_DEBUG_LEVEL=5 p11tool --provider=/usr/lib/librtpkcs11ecp.so --list-token-urls -d 9
(p11-kit:19048) p11_library_init_impl: initializing library
gnutls[2]: Enabled GnuTLS 3.8.11 logging...
gnutls[2]: getrandom random generator was selected
gnutls[2]: Intel SSSE3 was detected
gnutls[2]: Intel AES accelerator was detected
gnutls[2]: Intel GCM accelerator (AVX) was detected
gnutls[2]: cfg: disabling version tls1.0
gnutls[2]: cfg: disabling version tls1.1
gnutls[2]: cfg: disabling version dtls0.9
gnutls[2]: cfg: disabling version dtls1.0
gnutls[2]: cfg: loaded system config /etc/gnutls/config mtime 1765814046
Setting log level to 9
(p11-kit:19048) p11_kit_module_load: in: /usr/lib/librtpkcs11ecp.so
(p11-kit:19048) load_module_from_file_inlock: loading module from path: /usr/lib/librtpkcs11ecp.so
(p11-kit:19048) dlopen_and_get_function_list: C_GetInterface not available. Falling back to C_GetFunctionList()
(p11-kit:19048) dlopen_and_get_function_list: opened module: /usr/lib/librtpkcs11ecp.so
(p11-kit:19048) p11_kit_module_load: out: success
|<2>| p11: Initializing module: (null)
(p11-kit:19048) managed_C_Initialize: in
(p11-kit:19048) initialize_module_inlock_reentrant: C_Initialize: calling
(p11-kit:19048) initialize_module_inlock_reentrant: C_Initialize: result: 9
(p11-kit:19048) managed_C_Initialize: out: 9
|<3>| ASSERT: ../../lib/pkcs11.c[pkcs11_provider_init]:301
(p11-kit:19048) p11_kit_module_release: in
(p11-kit:19048) p11_kit_module_release: out
|<3>| ASSERT: ../../lib/pkcs11.c[gnutls_pkcs11_add_provider]:503
pkcs11_add_provider: Thread locking error
(p11-kit:19048) uninit_common: uninitializing library
```
--
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/issues/1774#note_2962697672
You're receiving this email because of your account on gitlab.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20251218/13ef92e0/attachment.html>
More information about the Gnutls-devel
mailing list