Please update to >= 3.4.1

------- Comment From <email address hidden> 2016-01-28 21:16 EDT-------
*** Bug 136198 has been marked as a duplicate of this bug. ***

https://launchpad.net/ubuntu/+source/opencryptoki/3.4.1+dfsg-1ubuntu1

In proposed.

Please note I was not able to test any s390x specific tokens, however the package is available. I am expecting that some tokens may fail to initialize, in that case please file bug reports about them.

------- Comment From <email address hidden> 2016-02-10 06:02 EDT-------
I pulled and tested. The token shared lib dir needs to be added to ld.conf

Please add a file /etc/ld.so.conf.d/opencryptoki.conf
with this content:

# shared lib path for opencryptoki tokens
/usr/lib/opencryptoki/stdll

and then the token shared libs will be found.

Thanks

------- Comment From <email address hidden> 2016-02-10 06:10 EDT-------
With the change mentioned above, the soft token and the ica token come up. The ep11 and the cca tokens are failing as expected (there is no ep11 and cca host library available yet).

------- Comment From <email address hidden> 2016-02-10 14:14 EDT-------
opencryptoki is installable, version 3.4.1+dfsg-1ubuntu1.
/etc/ld.so.conf.d/opencryptoki.conf is still missing - Harald, should this become part of the .deb pkg?? Or can I close this bug now?

i was expecting for tokens to be found without the extra ld.so.conf.d snippet.

And I also wondering to move them to multiarch locations.

I am end of week already (holidays) so will take a closer look next week.

On Wed, Feb 10, 2016 at 12:20 PM, bugproxy <email address hidden> wrote:
> ------- Comment From <email address hidden> 2016-02-10 06:02 EDT-------
> I pulled and tested. The token shared lib dir needs to be added to ld.conf
>
> Please add a file /etc/ld.so.conf.d/opencryptoki.conf
> with this content:
>
> # shared lib path for opencryptoki tokens
> /usr/lib/opencryptoki/stdll
>
> and then the token shared libs will be found.
>
> Thanks
>
> ------- Comment From <email address hidden> 2016-02-10 06:10 EDT-------
> With the change mentioned above, the soft token and the ica token come up. The ep11 and the cca tokens are failing as expected (there is no ep11 and cca host library available yet).
>
> ------- Comment From <email address hidden> 2016-02-10 14:14 EDT-------
> opencryptoki is installable, version 3.4.1+dfsg-1ubuntu1.
> /etc/ld.so.conf.d/opencryptoki.conf is still missing - Harald, should this become part of the .deb pkg?? Or can I close this bug now?

This issue is related to initial packaging of a version. For
additional issues related to that packaging, please open new LP bugs.
(I'd do it on your behalf, but probably easier for the proxy for it to
be done on your side).

------- Comment From <email address hidden> 2016-02-11 04:01 EDT-------
> /etc/ld.so.conf.d/opencryptoki.conf is still missing - Harald, should this
> become part of the .deb pkg?? Or can I close this bug now?
Yes, this should be part of the deb package. There exist similar files in the RHEL and SLES rpms.

However, if you prefer to package the token shared libs to e.g. /usr/lib instead of /usr/lib/opencryptoki/stdll this would be a solution without the additional ldconfig file.

------- Comment From <email address hidden> 2016-02-22 05:47 EDT-------
I checked the content of the opencryptoki packages.
The libopencryptoki0 package includes some softinks to the required shared libs but these are incomplete:
lrwxrwxrwx 1 root root 37 Feb 9 01:04 libpkcs11_cca.so.0 -> opencryptoki/stdll/libpkcs11_cca.so.0
lrwxrwxrwx 1 root root 41 Feb 9 01:04 libpkcs11_cca.so.0.0.0 -> opencryptoki/stdll/libpkcs11_cca.so.0.0.0
lrwxrwxrwx 1 root root 38 Feb 9 01:04 libpkcs11_ep11.so.0 -> opencryptoki/stdll/libpkcs11_ep11.so.0
lrwxrwxrwx 1 root root 42 Feb 9 01:04 libpkcs11_ep11.so.0.0.0 -> opencryptoki/stdll/libpkcs11_ep11.so.0.0.0
lrwxrwxrwx 1 root root 37 Feb 9 01:04 libpkcs11_ica.so.0 -> opencryptoki/stdll/libpkcs11_ica.so.0
lrwxrwxrwx 1 root root 41 Feb 9 01:04 libpkcs11_ica.so.0.0.0 -> opencryptoki/stdll/libpkcs11_ica.so.0.0.0
lrwxrwxrwx 1 root root 38 Feb 9 01:04 libpkcs11_icsf.so.0 -> opencryptoki/stdll/libpkcs11_icsf.so.0
lrwxrwxrwx 1 root root 42 Feb 9 01:04 libpkcs11_icsf.so.0.0.0 -> opencryptoki/stdll/libpkcs11_icsf.so.0.0.0
lrwxrwxrwx 1 root root 17 Feb 9 01:04 libpkcs11_sw.so -> libpkcs11_sw.so.0
lrwxrwxrwx 1 root root 36 Feb 9 01:04 libpkcs11_sw.so.0 -> opencryptoki/stdll/libpkcs11_sw.so.0
lrwxrwxrwx 1 root root 40 Feb 9 01:04 libpkcs11_sw.so.0.0.0 -> opencryptoki/stdll/libpkcs11_sw.so.0.0.0
lrwxrwxrwx 1 root root 18 Feb 9 01:04 libpkcs11_tpm.so -> libpkcs11_tpm.so.0
lrwxrwxrwx 1 root root 37 Feb 9 01:04 libpkcs11_tpm.so.0 -> opencryptoki/stdll/libpkcs11_tpm.so.0
lrwxrwxrwx 1 root root 41 Feb 9 01:04 libpkcs11_tpm.so.0.0.0 -> opencryptoki/stdll/libpkcs11_tpm.so.0.0.0

the missing links are:

libpkcs11_cca.so -> libpkcs11_cca.so.0
libpkcs11_ep11.so -> libpkcs11_ep11.so.0
libpkcs11_ica.so -> libpkcs11_ica.so.0

This has been fixed in the: https://launchpad.net/ubuntu/+source/opencryptoki/3.4.1+dfsg-1ubuntu2 upload.
However that is currently pending manual review before it migrates to release.
When it migrates the "launchpad bug janitor" will auto-close this bug report.
So I'm reopening this bug in the mean time.

You may test the packages in the proposed pocket following these instructions: https://wiki.ubuntu.com/Testing/EnableProposed

But note that running systems with proposed enabled is not recommended for anything bug selective package testing.

For any further issues with 3.4.1+dfsg-1ubuntu2 or any later uploads, please open new bug reports.

This bug was fixed in the package opencryptoki - 3.4.1+dfsg-1ubuntu2

---------------
opencryptoki (3.4.1+dfsg-1ubuntu2) xenial; urgency=medium

  * Add missing links for cca, ep11, icsf, and ica tokens. (LP: #1538822)

 -- Dimitri John Ledkov <email address hidden> Mon, 22 Feb 2016 11:26:00 +0000