Attachment 1442008 Details for Bug 1577572 – patched openconnect, actual gnutls

patched openconnect, actual gnutls

openconnect.patched.gnutls-f28.f28.log (text/plain), 4.53 KB, created by Denis Kostousov on 2018-05-26 16:55:19 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Denis Kostousov

Created: 2018-05-26 16:55:19 UTC

Size: 4.53 KB

patch

obsolete

>kostousov-ds@irtysh 21:52:18]~(130)% p11tool --list-tokens   
>Token 0:
>	URL: pkcs11:model=p11-kit-trust;manufacturer=PKCS%2311%20Kit;serial=1;token=System%20Trust
>	Label: System Trust
>	Type: Trust module
>	Flags: uPIN uninitialized
>	Manufacturer: PKCS#11 Kit
>	Model: p11-kit-trust
>	Serial: 1
>	Module: p11-kit-trust.so
>
>
>Token 1:
>	URL: pkcs11:model=p11-kit-trust;manufacturer=PKCS%2311%20Kit;serial=1;token=Default%20Trust
>	Label: Default Trust
>	Type: Trust module
>	Flags: uPIN uninitialized
>	Manufacturer: PKCS#11 Kit
>	Model: p11-kit-trust
>	Serial: 1
>	Module: p11-kit-trust.so
>
>
>Token 2:
>	URL: pkcs11:model=PKCS%2315;manufacturer=Aktiv%20Co.;serial=0000000031296E36;token=User%20PIN%20%28Rutoken%20ECP%29
>	Label: User PIN (Rutoken ECP)
>	Type: Hardware token
>	Flags: RNG, Requires login
>	Manufacturer: Aktiv Co.
>	Model: PKCS#15
>	Serial: 0000000031296E36
>	Module: opensc-pkcs11.so
>
>
>[kostousov-ds@irtysh 21:52:19]~(0)% sudo GNUTLS_DEBUG_LEVEL=6 openconnect -c "pkcs11:token=User%20PIN%20%28Rutoken%20ECP%29" --script /etc/openconnect/vpnc-script https://vpn.company.com/+webvpn+/index.html
>gnutls[2]: Enabled GnuTLS 3.6.2 logging...
>gnutls[2]: getrandom random generator was detected
>gnutls[2]: Intel SSSE3 was detected
>gnutls[2]: Intel AES accelerator was detected
>gnutls[2]: Intel GCM accelerator was detected
>gnutls[2]: cached system priority /etc/crypto-policies/back-ends/gnutls.config mtime 1526676780
>POST https://vpn.company.com/+webvpn+/index.html
>Connected to x.x.x.x:443
>gnutls[2]: Initializing needed PKCS #11 modules
>gnutls[2]: p11: Initializing module: p11-kit-trust
>gnutls[2]: p11: No login requested.
>gnutls[3]: p11 attrs: CKA_CLASS (CERT), CKA_CERTIFICATE_TYPE
>gnutls[3]: p11 attrs: CKA_TRUSTED
>gnutls[3]: p11 attrs: CKA_CERTIFICATE_CATEGORY=CA
>gnutls[2]: p11: No login requested.
>gnutls[3]: p11 attrs: CKA_CLASS (CERT), CKA_CERTIFICATE_TYPE
>gnutls[3]: p11 attrs: CKA_TRUSTED
>gnutls[3]: p11 attrs: CKA_CERTIFICATE_CATEGORY=CA
>gnutls[3]: ASSERT: pkcs11.c[find_objs_cb]:2888
>gnutls[3]: ASSERT: pkcs11.c[gnutls_pkcs11_obj_list_import_url3]:3209
>gnutls[2]: Initializing all PKCS #11 modules
>gnutls[2]: p11: Initializing module: p11-kit-trust
>gnutls[2]: p11: module p11-kit-trust is already loaded.
>gnutls[3]: ASSERT: pkcs11.c[auto_load]:812
>gnutls[2]: Cannot load PKCS #11 module: p11-kit-trust
>gnutls[2]: p11: Initializing module: opensc
>gnutls[3]: ASSERT: pkcs11.c[compat_load]:757
>gnutls[2]: p11: No login requested.
>gnutls[3]: ASSERT: pkcs11.c[add_obj_attrs]:447
>gnutls[3]: ASSERT: pkcs11.c[find_obj_url_cb]:2060
>gnutls[3]: ASSERT: pkcs11.c[find_obj_url_cb]:2044
>gnutls[3]: ASSERT: pkcs11.c[gnutls_pkcs11_obj_import_url]:2174
>gnutls[3]: ASSERT: pkcs11.c[_gnutls_x509_crt_import_pkcs11_url]:3355
>PIN required for User PIN (Rutoken ECP)
>Enter PIN:
>gnutls[2]: p11: Login result = ok (0)
>gnutls[3]: ASSERT: pkcs11.c[add_obj_attrs]:447
>gnutls[3]: ASSERT: pkcs11.c[find_obj_url_cb]:2060
>gnutls[3]: ASSERT: pkcs11.c[find_obj_url_cb]:2044
>gnutls[3]: ASSERT: pkcs11.c[gnutls_pkcs11_obj_import_url]:2174
>gnutls[3]: ASSERT: pkcs11.c[_gnutls_x509_crt_import_pkcs11_url]:3355
>Error loading certificate from PKCS#11: The requested data were not available.
>Loading certificate failed. Aborting.
>Failed to open HTTPS connection to vpn.company.com
>Failed to obtain WebVPN cookie
>[kostousov-ds@irtysh 21:53:02]~(1)% rpm -qa p11\* pcsc\* opensc\* gnutls\* openconnect\*
>gnutls-3.6.2-1.fc28.x86_64
>gnutls-dane-3.6.2-1.fc28.x86_64
>p11-kit-trust-0.23.10-1.fc28.x86_64
>pcsc-lite-libs-1.8.23-2.fc28.x86_64
>p11-kit-0.23.10-1.fc28.x86_64
>opensc-0.17.0-10.fc28.x86_64
>openconnect-7.08-7.fc28.x86_64
>gnutls-utils-3.6.2-1.fc28.x86_64
>pcsc-lite-1.8.23-2.fc28.x86_64
>pcsc-lite-ccid-1.4.29-1.fc28.x86_64
>[kostousov-ds@irtysh 21:53:12]~(0)% sudo dnf list openconnect
>Repository yandex is listed more than once in the configuration
>ÐÐµ ÑÐ´Ð°ÐµÑÑÑ ÑÐ¸Ð½ÑÑÐ¾Ð½Ð¸Ð·Ð¸ÑÐ¾Ð²Ð°ÑÑ ÐºÑÑ Ð´Ð»Ñ ÑÐµÐ¿Ð¾Ð·Ð¸ÑÐ¾ÑÐ¸Ñ Â«heikoada-terminixÂ», Ð¾ÑÐºÐ»ÑÑÐµÐ½Ð¸Ðµ.
>ÐÐ¾ÑÐ»ÐµÐ´Ð½ÑÑ Ð¿ÑÐ¾Ð²ÐµÑÐºÐ° Ð¾ÐºÐ¾Ð½ÑÐ°Ð½Ð¸Ñ ÑÑÐ¾ÐºÐ° Ð´ÐµÐ¹ÑÑÐ²Ð¸Ñ Ð¼ÐµÑÐ°Ð´Ð°Ð½Ð½ÑÑ: 0:44:47 Ð½Ð°Ð·Ð°Ð´, Ð¡Ð± 26 Ð¼Ð°Ñ 2018 21:08:46.
>Ð£ÑÑÐ°Ð½Ð¾Ð²Ð»ÐµÐ½Ð½ÑÐµ Ð¿Ð°ÐºÐµÑÑ
>openconnect.x86_64                                                                                    7.08-7.fc28                                                                                     @@commandline
>ÐÐ¼ÐµÑÑÐ¸ÐµÑÑ Ð¿Ð°ÐºÐµÑÑ
>openconnect.i686                                                                                      7.08-5.fc28                                                                                     fedora       
>[kostousov-ds@irtysh 21:53:35]~(0)% 
>

Actions: View

Attachments on bug 1577572: 1436073 | 1436219 | 1436638 | 1436640 | 1437472 | 1437774 | 1438050 | 1438051 | 1438052 | 1438989 | 1438990 | 1442008 | 1443406 | 1445372