Bug 1235284 - libp11: doesn't work for applications that do fork
Summary: libp11: doesn't work for applications that do fork
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: libp11
Version: 22
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Nikos Mavrogiannopoulos
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: 1236526
TreeView+ depends on / blocked
 
Reported: 2015-06-24 13:13 UTC by Nikos Mavrogiannopoulos
Modified: 2015-07-12 20:18 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2015-07-12 20:18:24 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Nikos Mavrogiannopoulos 2015-06-24 13:13:57 UTC
Description of problem:
Engine_pkcs11 is simple to use for applications as it hides all the PKCS #11 stuff, but it doesn't cope with the case of applications that fork. That is PKCS #11 (v2.40) requires the reinitialization (C_Initialize) of any open modules after fork. That would also imply that open handles to objects have to be reopened again.

That is not done by the engine. See upstream issue:
https://github.com/OpenSC/engine_pkcs11/issues/16

Comment 1 Nikos Mavrogiannopoulos 2015-06-26 14:16:07 UTC
Reassigning to libp11, as this seems like the proper place to fix the issue.

https://github.com/OpenSC/libp11/pull/21

Comment 2 Kalev Lember 2015-06-29 11:26:55 UTC
Do you want commit access to push the fixes out yourself?

I don't use the pkcs11 stack myself any more and I'd be happy to hand it over to you, if you want - I've only been holding on to them so they don't get removed from the distro.

Comment 3 Nikos Mavrogiannopoulos 2015-06-29 12:04:14 UTC
I wouldn't really like to maintain this package. If David cannot handle as well, then we don't have a choice anyway. I'll apply.

Comment 4 David Woodhouse 2015-06-29 15:16:38 UTC
I'm somewhat reluctant to take on new packages, as I know I don't do an excellent job of maintaining them — my attention is fairly sporadic. I'm happy to comaintain, but as a provenpackager I tend to do that anyway.

Comment 5 Nikos Mavrogiannopoulos 2015-06-30 08:30:29 UTC
Ok. I'll apply for comaintainership.

Comment 6 Nikos Mavrogiannopoulos 2015-07-10 13:39:22 UTC
I've sent a pull request upstream, and applied it in rawhide for testing.
https://github.com/OpenSC/libp11/pull/25


Note You need to log in before you can comment on or make changes to this bug.