I validated the pin for the HSM token with:

# pkcs11-tool --module /usr/safenet/lunaclient/lib/libCryptoki2_64.so --login 
--test --pin "E9J7-Pb9F-XXXX-XXXX"
Using slot 0 with a present token (0x0)
C_SeedRandom() and C_GenerateRandom():
  seems to be OK
Digests:
  all 4 digest functions seem to work
  SHA-1: OK
  SHA256: OK
  ERR: C_Digest() didn't return CKR_OK for a NULL output buffer, but 
CKR_OPERATION_NOT_INITIALIZED (0x91)
  ERR: digest operation ended prematurely
Signatures (currently only for RSA)
  testing key 0 ()  -- non-RSA, skipping
  testing key 1 ()  -- non-RSA, skipping
  testing key 2 ()  -- non-RSA, skipping
  testing key 3 ()  -- non-RSA, skipping
  testing key 4 ()  -- non-RSA, skipping
  testing key 5 (caSigningCert cert-pki-ca)  -- non-RSA, skipping
  testing key 6 ()  -- non-RSA, skipping
  testing key 7 ()  -- non-RSA, skipping
  testing key 8 ()  -- non-RSA, skipping
Signatures: no private key found in this slot
Verify (currently only for RSA)

So I think I need to do some additional installation?!
-- 
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to