Mock Version: 5.0 Mock Version: 5.0 Mock Version: 5.0 ENTER ['do_with_status'](['bash', '--login', '-c', '/usr/bin/rpmbuild -bs --noclean --target riscv64 --nodeps /builddir/build/SPECS/pkcs11-provider.spec'], chrootPath='/var/lib/mock/f39-build-1828088-41881/root'env={'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;\\007"', 'PS1': ' \\s-\\v\\$ ', 'LANG': 'C.UTF-8'}shell=Falselogger=timeout=864000uid=996gid=135user='mockbuild'nspawn_args=[]unshare_net=TrueprintOutput=False) Executing command: ['bash', '--login', '-c', '/usr/bin/rpmbuild -bs --noclean --target riscv64 --nodeps /builddir/build/SPECS/pkcs11-provider.spec'] with env {'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;\\007"', 'PS1': ' \\s-\\v\\$ ', 'LANG': 'C.UTF-8'} and shell False Building target platforms: riscv64 Building for target riscv64 setting SOURCE_DATE_EPOCH=1689897600 Wrote: /builddir/build/SRPMS/pkcs11-provider-0.2-2.fc39.src.rpm Child return code was: 0 ENTER ['do_with_status'](['bash', '--login', '-c', '/usr/bin/rpmbuild -bb --noclean --target riscv64 --nodeps /builddir/build/SPECS/pkcs11-provider.spec'], chrootPath='/var/lib/mock/f39-build-1828088-41881/root'env={'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;\\007"', 'PS1': ' \\s-\\v\\$ ', 'LANG': 'C.UTF-8'}shell=Falselogger=timeout=864000uid=996gid=135user='mockbuild'nspawn_args=[]unshare_net=TrueprintOutput=False) Executing command: ['bash', '--login', '-c', '/usr/bin/rpmbuild -bb --noclean --target riscv64 --nodeps /builddir/build/SPECS/pkcs11-provider.spec'] with env {'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;\\007"', 'PS1': ' \\s-\\v\\$ ', 'LANG': 'C.UTF-8'} and shell False Building target platforms: riscv64 Building for target riscv64 setting SOURCE_DATE_EPOCH=1689897600 Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.sHjmyy + umask 022 + cd /builddir/build/BUILD + cd /builddir/build/BUILD + rm -rf pkcs11-provider-0.2 + /usr/lib/rpm/rpmuncompress -x /builddir/build/SOURCES/pkcs11-provider-0.2.tar.xz + STATUS=0 + '[' 0 -ne 0 ']' + cd pkcs11-provider-0.2 + rm -rf /builddir/build/BUILD/pkcs11-provider-0.2-SPECPARTS + /usr/bin/mkdir -p /builddir/build/BUILD/pkcs11-provider-0.2-SPECPARTS + /usr/bin/chmod -Rf a+rX,u+w,g-w,o-w . + RPM_EC=0 ++ jobs -p + exit 0 Executing(%build): /bin/sh -e /var/tmp/rpm-tmp.zhgWQL + umask 022 + cd /builddir/build/BUILD + CFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer ' + export CFLAGS + CXXFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer ' + export CXXFLAGS + FFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -I/usr/lib64/gfortran/modules ' + export FFLAGS + FCFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -I/usr/lib64/gfortran/modules ' + export FCFLAGS + VALAFLAGS=-g + export VALAFLAGS + RUSTFLAGS='-Copt-level=3 -Cdebuginfo=2 -Ccodegen-units=1 -Cstrip=none -Cforce-frame-pointers=yes -Clink-arg=-Wl,-z,relro -Clink-arg=-Wl,-z,now -Clink-arg=-specs=/usr/lib/rpm/redhat/redhat-package-notes --cap-lints=warn' + export RUSTFLAGS + LDFLAGS='-Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes ' + export LDFLAGS + LT_SYS_LIBRARY_PATH=/usr/lib64: + export LT_SYS_LIBRARY_PATH + CC=gcc + export CC + CXX=g++ + export CXX + cd pkcs11-provider-0.2 + autoreconf -fi libtoolize: putting auxiliary files in '.'. libtoolize: copying file './ltmain.sh' libtoolize: putting macros in AC_CONFIG_MACRO_DIRS, 'm4'. libtoolize: copying file 'm4/libtool.m4' libtoolize: copying file 'm4/ltoptions.m4' libtoolize: copying file 'm4/ltsugar.m4' libtoolize: copying file 'm4/ltversion.m4' libtoolize: copying file 'm4/lt~obsolete.m4' configure.ac:12: installing './compile' configure.ac:8: installing './missing' src/Makefile.am: installing './depcomp' + CFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer ' + export CFLAGS + CXXFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer ' + export CXXFLAGS + FFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -I/usr/lib64/gfortran/modules ' + export FFLAGS + FCFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -I/usr/lib64/gfortran/modules ' + export FCFLAGS + VALAFLAGS=-g + export VALAFLAGS + RUSTFLAGS='-Copt-level=3 -Cdebuginfo=2 -Ccodegen-units=1 -Cstrip=none -Cforce-frame-pointers=yes -Clink-arg=-Wl,-z,relro -Clink-arg=-Wl,-z,now -Clink-arg=-specs=/usr/lib/rpm/redhat/redhat-package-notes --cap-lints=warn' + export RUSTFLAGS + LDFLAGS='-Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes ' + export LDFLAGS + LT_SYS_LIBRARY_PATH=/usr/lib64: + export LT_SYS_LIBRARY_PATH + CC=gcc + export CC + CXX=g++ + export CXX + '[' '-flto=auto -ffat-lto-objectsx' '!=' x ']' ++ find . -type f -name configure -print + for file in $(find . -type f -name configure -print) + /usr/bin/sed -r --in-place=.backup 's/^char \(\*f\) \(\) = /__attribute__ ((used)) char (*f) () = /g' ./configure + diff -u ./configure.backup ./configure + mv ./configure.backup ./configure + /usr/bin/sed -r --in-place=.backup 's/^char \(\*f\) \(\);/__attribute__ ((used)) char (*f) ();/g' ./configure + diff -u ./configure.backup ./configure + mv ./configure.backup ./configure + /usr/bin/sed -r --in-place=.backup 's/^char \$2 \(\);/__attribute__ ((used)) char \$2 ();/g' ./configure + diff -u ./configure.backup ./configure --- ./configure.backup 2023-11-27 15:23:09.364486905 -0500 +++ ./configure 2023-11-27 15:23:51.444457598 -0500 @@ -1768,7 +1768,7 @@ #ifdef __cplusplus extern "C" #endif -char $2 (); +__attribute__ ((used)) char $2 (); /* The GNU C library defines this for functions which it implements to always fail with ENOSYS. Some functions are actually named something starting with __ and the normal name is an alias. */ + /usr/bin/sed --in-place=.backup '1{$!N;$!N};$!N;s/int x = 1;\nint y = 0;\nint z;\nint nan;/volatile int x = 1; volatile int y = 0; volatile int z, nan;/;P;D' ./configure + diff -u ./configure.backup ./configure + mv ./configure.backup ./configure + /usr/bin/sed --in-place=.backup 's#^lt_cv_sys_global_symbol_to_cdecl=.*#lt_cv_sys_global_symbol_to_cdecl="sed -n -e '\''s/^T .* \\(.*\\)$/extern int \\1();/p'\'' -e '\''s/^$symcode* .* \\(.*\\)$/extern char \\1;/p'\''"#' ./configure + diff -u ./configure.backup ./configure --- ./configure.backup 2023-11-27 15:23:51.444457598 -0500 +++ ./configure 2023-11-27 15:23:52.424456915 -0500 @@ -7051,7 +7051,7 @@ # Transform an extracted symbol line into a proper C declaration. # Some systems (esp. on ia64) link data and code symbols differently, # so use this general approach. -lt_cv_sys_global_symbol_to_cdecl="$SED -n"\ +lt_cv_sys_global_symbol_to_cdecl="sed -n -e 's/^T .* \(.*\)$/extern int \1();/p' -e 's/^$symcode* .* \(.*\)$/extern char \1;/p'" $lt_cdecl_hook\ " -e 's/^T .* \(.*\)$/extern int \1();/p'"\ " -e 's/^$symcode$symcode* .* \(.*\)$/extern char \1;/p'" @@ -15312,7 +15312,7 @@ compiler='`$ECHO "$compiler" | $SED "$delay_single_quote_subst"`' GCC='`$ECHO "$GCC" | $SED "$delay_single_quote_subst"`' lt_cv_sys_global_symbol_pipe='`$ECHO "$lt_cv_sys_global_symbol_pipe" | $SED "$delay_single_quote_subst"`' -lt_cv_sys_global_symbol_to_cdecl='`$ECHO "$lt_cv_sys_global_symbol_to_cdecl" | $SED "$delay_single_quote_subst"`' +lt_cv_sys_global_symbol_to_cdecl="sed -n -e 's/^T .* \(.*\)$/extern int \1();/p' -e 's/^$symcode* .* \(.*\)$/extern char \1;/p'" lt_cv_sys_global_symbol_to_import='`$ECHO "$lt_cv_sys_global_symbol_to_import" | $SED "$delay_single_quote_subst"`' lt_cv_sys_global_symbol_to_c_name_address='`$ECHO "$lt_cv_sys_global_symbol_to_c_name_address" | $SED "$delay_single_quote_subst"`' lt_cv_sys_global_symbol_to_c_name_address_lib_prefix='`$ECHO "$lt_cv_sys_global_symbol_to_c_name_address_lib_prefix" | $SED "$delay_single_quote_subst"`' + '[' 1 = 1 ']' +++ dirname ./configure ++ find . -name config.guess -o -name config.sub + for i in $(find $(dirname ./configure) -name config.guess -o -name config.sub) ++ basename ./config.sub + '[' -f /usr/lib/rpm/redhat/config.sub ']' + /usr/bin/rm -f ./config.sub ++ basename ./config.sub + /usr/bin/cp -fv /usr/lib/rpm/redhat/config.sub ./config.sub '/usr/lib/rpm/redhat/config.sub' -> './config.sub' + for i in $(find $(dirname ./configure) -name config.guess -o -name config.sub) ++ basename ./config.guess + '[' -f /usr/lib/rpm/redhat/config.guess ']' + /usr/bin/rm -f ./config.guess ++ basename ./config.guess + /usr/bin/cp -fv /usr/lib/rpm/redhat/config.guess ./config.guess '/usr/lib/rpm/redhat/config.guess' -> './config.guess' + '[' 1 = 1 ']' + '[' x '!=' 'x-Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld' ']' ++ find . -name ltmain.sh + for i in $(find . -name ltmain.sh) + /usr/bin/sed -i.backup -e 's~compiler_flags=$~compiler_flags="-Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld"~' ./ltmain.sh ++ grep -q runstatedir=DIR ./configure ++ echo --runstatedir=/run + ./configure --build=riscv64-koji-linux-gnu --host=riscv64-koji-linux-gnu --program-prefix= --disable-dependency-tracking --prefix=/usr --exec-prefix=/usr --bindir=/usr/bin --sbindir=/usr/sbin --sysconfdir=/etc --datadir=/usr/share --includedir=/usr/include --libdir=/usr/lib64 --libexecdir=/usr/libexec --localstatedir=/var --runstatedir=/run --sharedstatedir=/var/lib --mandir=/usr/share/man --infodir=/usr/share/info checking for a BSD-compatible install... /usr/bin/install -c checking whether build environment is sane... yes checking for a race-free mkdir -p... /usr/bin/mkdir -p checking for gawk... gawk checking whether make sets $(MAKE)... yes checking whether make supports nested variables... yes checking for riscv64-koji-linux-gnu-gcc... gcc checking whether the C compiler works... yes checking for C compiler default output file name... a.out checking for suffix of executables... checking whether we are cross compiling... no checking for suffix of object files... o checking whether the compiler supports GNU C... yes checking whether gcc accepts -g... yes checking for gcc option to enable C11 features... none needed checking whether gcc understands -c and -o together... yes checking whether make supports the include directive... yes (GNU style) checking dependency style of gcc... none checking for riscv64-koji-linux-gnu-ar... no checking for riscv64-koji-linux-gnu-lib... no checking for riscv64-koji-linux-gnu-link... no checking for ar... ar checking the archiver (ar) interface... ar checking build system type... riscv64-koji-linux-gnu checking host system type... riscv64-koji-linux-gnu checking how to print strings... printf checking for a sed that does not truncate output... /usr/bin/sed checking for grep that handles long lines and -e... /usr/bin/grep checking for egrep... /usr/bin/grep -E checking for fgrep... /usr/bin/grep -F checking for ld used by gcc... /usr/bin/ld checking if the linker (/usr/bin/ld) is GNU ld... yes checking for BSD- or MS-compatible name lister (nm)... /usr/bin/nm -B checking the name lister (/usr/bin/nm -B) interface... BSD nm checking whether ln -s works... yes checking the maximum length of command line arguments... 1572864 checking how to convert riscv64-koji-linux-gnu file names to riscv64-koji-linux-gnu format... func_convert_file_noop checking how to convert riscv64-koji-linux-gnu file names to toolchain format... func_convert_file_noop checking for /usr/bin/ld option to reload object files... -r checking for riscv64-koji-linux-gnu-file... no checking for file... file checking for riscv64-koji-linux-gnu-objdump... no checking for objdump... objdump checking how to recognize dependent libraries... pass_all checking for riscv64-koji-linux-gnu-dlltool... no checking for dlltool... no checking how to associate runtime and link libraries... printf %s\n checking for riscv64-koji-linux-gnu-ar... ar checking for archiver @FILE support... @ checking for riscv64-koji-linux-gnu-strip... no checking for strip... strip checking for riscv64-koji-linux-gnu-ranlib... no checking for ranlib... ranlib checking command to parse /usr/bin/nm -B output from gcc object... ./configure: line 7057: -e 's/^T .* \(.*\)$/extern int \1();/p' -e 's/^[ABCDGIRSTW][ABCDGIRSTW]* .* \(.*\)$/extern char \1;/p': No such file or directory ok checking for sysroot... no checking for a working dd... /usr/bin/dd checking how to truncate binary pipes... /usr/bin/dd bs=4096 count=1 checking for riscv64-koji-linux-gnu-mt... no checking for mt... no checking if : is a manifest tool... no checking for stdio.h... yes checking for stdlib.h... yes checking for string.h... yes checking for inttypes.h... yes checking for stdint.h... yes checking for strings.h... yes checking for sys/stat.h... yes checking for sys/types.h... yes checking for unistd.h... yes checking for dlfcn.h... yes checking for objdir... .libs checking if gcc supports -fno-rtti -fno-exceptions... no checking for gcc option to produce PIC... -fPIC -DPIC checking if gcc PIC flag -fPIC -DPIC works... yes checking if gcc static flag -static works... no checking if gcc supports -c -o file.o... yes checking if gcc supports -c -o file.o... (cached) yes checking whether the gcc linker (/usr/bin/ld) supports shared libraries... yes checking whether -lc should be explicitly linked in... no checking dynamic linker characteristics... GNU/Linux ld.so checking how to hardcode library paths into programs... immediate checking whether stripping libraries is possible... yes checking if libtool supports shared libraries... yes checking whether to build shared libraries... yes checking whether to build static libraries... yes checking for riscv64-koji-linux-gnu-pkg-config... no checking for pkg-config... /usr/bin/pkg-config checking pkg-config is at least version 0.9.0... yes checking whether C compiler accepts -std=c11... yes checking for valgrind... no checking whether C compiler accepts -fno-strict-aliasing... yes checking whether C compiler accepts -Werror -fno-delete-null-pointer-checks... yes checking whether C compiler accepts -fdiagnostics-show-option... yes checking for libcrypto >= 3.0.7... yes checking for libcrypto >= 3.0.7, libssl... yes checking for --with-address-sanitizer... no checking for /usr/lib64/libsoftokn3.so... yes checking for string.h... (cached) yes checking for dlfcn.h... (cached) yes checking for _Bool... yes checking for stdbool.h that conforms to C99... yes checking whether byte ordering is bigendian... no checking for inline... inline checking for size_t... yes checking for strpbrk... yes checking that generated files are newer than configure... done configure: creating ./config.status config.status: creating Makefile config.status: creating docs/Makefile config.status: creating src/Makefile config.status: creating tests/Makefile config.status: creating src/config.h config.status: executing depfiles commands config.status: executing libtool commands + /usr/bin/make -O -j8 V=1 VERBOSE=1 Making all in src /usr/bin/make all-am make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-debug.lo `test -f 'debug.c' || echo './'`debug.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c debug.c -fPIC -DPIC -o .libs/pkcs11_la-debug.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c debug.c -o pkcs11_la-debug.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-kdf.lo `test -f 'kdf.c' || echo './'`kdf.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c kdf.c -fPIC -DPIC -o .libs/pkcs11_la-kdf.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c kdf.c -o pkcs11_la-kdf.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-asymmetric_cipher.lo `test -f 'asymmetric_cipher.c' || echo './'`asymmetric_cipher.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c asymmetric_cipher.c -fPIC -DPIC -o .libs/pkcs11_la-asymmetric_cipher.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c asymmetric_cipher.c -o pkcs11_la-asymmetric_cipher.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-exchange.lo `test -f 'exchange.c' || echo './'`exchange.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c exchange.c -fPIC -DPIC -o .libs/pkcs11_la-exchange.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c exchange.c -o pkcs11_la-exchange.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-digests.lo `test -f 'digests.c' || echo './'`digests.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c digests.c -fPIC -DPIC -o .libs/pkcs11_la-digests.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c digests.c -o pkcs11_la-digests.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-encoder.lo `test -f 'encoder.c' || echo './'`encoder.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c encoder.c -fPIC -DPIC -o .libs/pkcs11_la-encoder.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c encoder.c -o pkcs11_la-encoder.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-random.lo `test -f 'random.c' || echo './'`random.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c random.c -fPIC -DPIC -o .libs/pkcs11_la-random.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c random.c -o pkcs11_la-random.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-keymgmt.lo `test -f 'keymgmt.c' || echo './'`keymgmt.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c keymgmt.c -fPIC -DPIC -o .libs/pkcs11_la-keymgmt.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c keymgmt.c -o pkcs11_la-keymgmt.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-interface.lo `test -f 'interface.c' || echo './'`interface.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c interface.c -fPIC -DPIC -o .libs/pkcs11_la-interface.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c interface.c -o pkcs11_la-interface.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-tls.lo `test -f 'tls.c' || echo './'`tls.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c tls.c -fPIC -DPIC -o .libs/pkcs11_la-tls.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c tls.c -o pkcs11_la-tls.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-slot.lo `test -f 'slot.c' || echo './'`slot.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c slot.c -fPIC -DPIC -o .libs/pkcs11_la-slot.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c slot.c -o pkcs11_la-slot.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-session.lo `test -f 'session.c' || echo './'`session.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c session.c -fPIC -DPIC -o .libs/pkcs11_la-session.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c session.c -o pkcs11_la-session.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-store.lo `test -f 'store.c' || echo './'`store.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c store.c -fPIC -DPIC -o .libs/pkcs11_la-store.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c store.c -o pkcs11_la-store.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-objects.lo `test -f 'objects.c' || echo './'`objects.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c objects.c -fPIC -DPIC -o .libs/pkcs11_la-objects.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c objects.c -o pkcs11_la-objects.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-provider.lo `test -f 'provider.c' || echo './'`provider.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c provider.c -fPIC -DPIC -o .libs/pkcs11_la-provider.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c provider.c -o pkcs11_la-provider.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-signature.lo `test -f 'signature.c' || echo './'`signature.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c signature.c -fPIC -DPIC -o .libs/pkcs11_la-signature.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c signature.c -o pkcs11_la-signature.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-util.lo `test -f 'util.c' || echo './'`util.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c util.c -fPIC -DPIC -o .libs/pkcs11_la-util.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c util.c -o pkcs11_la-util.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=link gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -module -shared -shrext .so -avoid-version -export-symbols "./provider.exports" -Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o pkcs11.la -rpath /usr/lib64/ossl-modules pkcs11_la-asymmetric_cipher.lo pkcs11_la-debug.lo pkcs11_la-encoder.lo pkcs11_la-digests.lo pkcs11_la-exchange.lo pkcs11_la-kdf.lo pkcs11_la-keymgmt.lo pkcs11_la-interface.lo pkcs11_la-objects.lo pkcs11_la-provider.lo pkcs11_la-random.lo pkcs11_la-session.lo pkcs11_la-signature.lo pkcs11_la-slot.lo pkcs11_la-store.lo pkcs11_la-tls.lo pkcs11_la-util.lo -lcrypto libtool: link: echo "{ global:" > .libs/pkcs11.ver libtool: link: cat ./provider.exports | /usr/bin/sed -e "s/\(.*\)/\1;/" >> .libs/pkcs11.ver libtool: link: echo "local: *; };" >> .libs/pkcs11.ver libtool: link: gcc -shared -fPIC -DPIC .libs/pkcs11_la-asymmetric_cipher.o .libs/pkcs11_la-debug.o .libs/pkcs11_la-encoder.o .libs/pkcs11_la-digests.o .libs/pkcs11_la-exchange.o .libs/pkcs11_la-kdf.o .libs/pkcs11_la-keymgmt.o .libs/pkcs11_la-interface.o .libs/pkcs11_la-objects.o .libs/pkcs11_la-provider.o .libs/pkcs11_la-random.o .libs/pkcs11_la-session.o .libs/pkcs11_la-signature.o .libs/pkcs11_la-slot.o .libs/pkcs11_la-store.o .libs/pkcs11_la-tls.o .libs/pkcs11_la-util.o -lcrypto -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -O2 -flto=auto -g -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -Wl,-soname -Wl,pkcs11.so -Wl,-version-script -Wl,.libs/pkcs11.ver -o .libs/pkcs11.so libtool: link: ( cd ".libs" && rm -f "pkcs11.la" && ln -s "../pkcs11.la" "pkcs11.la" ) make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' Making all in tests make[1]: Nothing to be done for 'all'. Making all in docs make[1]: Nothing to be done for 'all'. make[1]: Nothing to be done for 'all-am'. + RPM_EC=0 ++ jobs -p + exit 0 Executing(%install): /bin/sh -e /var/tmp/rpm-tmp.R61YI9 + umask 022 + cd /builddir/build/BUILD + '[' /builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64 '!=' / ']' + rm -rf /builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64 ++ dirname /builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64 + mkdir -p /builddir/build/BUILDROOT + mkdir /builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64 + CFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer ' + export CFLAGS + CXXFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer ' + export CXXFLAGS + FFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -I/usr/lib64/gfortran/modules ' + export FFLAGS + FCFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -I/usr/lib64/gfortran/modules ' + export FCFLAGS + VALAFLAGS=-g + export VALAFLAGS + RUSTFLAGS='-Copt-level=3 -Cdebuginfo=2 -Ccodegen-units=1 -Cstrip=none -Cforce-frame-pointers=yes -Clink-arg=-Wl,-z,relro -Clink-arg=-Wl,-z,now -Clink-arg=-specs=/usr/lib/rpm/redhat/redhat-package-notes --cap-lints=warn' + export RUSTFLAGS + LDFLAGS='-Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes ' + export LDFLAGS + LT_SYS_LIBRARY_PATH=/usr/lib64: + export LT_SYS_LIBRARY_PATH + CC=gcc + export CC + CXX=g++ + export CXX + cd pkcs11-provider-0.2 + /usr/bin/make install DESTDIR=/builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64 'INSTALL=/usr/bin/install -p' Making install in src make[1]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Nothing to be done for 'install-exec-am'. /usr/bin/mkdir -p '/builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64/usr/lib64/ossl-modules' /bin/sh ../libtool --mode=install /usr/bin/install -p pkcs11.la '/builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64/usr/lib64/ossl-modules' libtool: install: /usr/bin/install -p .libs/pkcs11.so /builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64/usr/lib64/ossl-modules/pkcs11.so libtool: install: /usr/bin/install -p .libs/pkcs11.lai /builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64/usr/lib64/ossl-modules/pkcs11.la libtool: warning: remember to run 'libtool --finish /usr/lib64/ossl-modules' make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[1]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' Making install in tests make[1]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' make[2]: Nothing to be done for 'install-data-am'. make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' make[1]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' Making install in docs make[1]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/docs' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/docs' make[2]: Nothing to be done for 'install-exec-am'. /usr/bin/mkdir -p '/builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64/usr/share/man/man7' /usr/bin/install -p -m 644 provider-pkcs11.7 '/builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64/usr/share/man/man7' make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/docs' make[1]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/docs' make[1]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2' make[2]: Nothing to be done for 'install-exec-am'. /usr/bin/mkdir -p '/builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64/usr/share/doc/pkcs11-provider' /usr/bin/install -p -m 644 README.md '/builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64/usr/share/doc/pkcs11-provider' make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2' make[1]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2' + /usr/bin/find-debuginfo -j8 --strict-build-id -m -i --build-id-seed 0.2-2.fc39 --unique-debug-suffix -0.2-2.fc39.riscv64 --unique-debug-src-base pkcs11-provider-0.2-2.fc39.riscv64 --run-dwz --dwz-low-mem-die-limit 10000000 --dwz-max-die-limit 50000000 -S debugsourcefiles.list /builddir/build/BUILD/pkcs11-provider-0.2 find-debuginfo: starting Extracting debug info from 1 files DWARF-compressing 1 files sepdebugcrcfix: Updated 1 CRC32s, 0 CRC32s did match. Creating .debug symlinks for symlinks to ELF files Copying sources found by 'debugedit -l' to /usr/src/debug/pkcs11-provider-0.2-2.fc39.riscv64 1273 blocks find-debuginfo: done + /usr/lib/rpm/check-buildroot + /usr/lib/rpm/redhat/brp-ldconfig + /usr/lib/rpm/brp-compress + /usr/lib/rpm/redhat/brp-strip-lto /usr/bin/strip + /usr/lib/rpm/brp-strip-static-archive /usr/bin/strip + /usr/lib/rpm/check-rpaths + /usr/lib/rpm/redhat/brp-mangle-shebangs *** WARNING: ./usr/lib64/ossl-modules/pkcs11.la is executable but has no shebang, removing executable bit + /usr/lib/rpm/brp-remove-la-files + env /usr/lib/rpm/redhat/brp-python-bytecompile '' 1 0 -j8 + /usr/lib/rpm/redhat/brp-python-hardlink Executing(%check): /bin/sh -e /var/tmp/rpm-tmp.vnkhVn + umask 022 + cd /builddir/build/BUILD + CFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer ' + export CFLAGS + CXXFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer ' + export CXXFLAGS + FFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -I/usr/lib64/gfortran/modules ' + export FFLAGS + FCFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -I/usr/lib64/gfortran/modules ' + export FCFLAGS + VALAFLAGS=-g + export VALAFLAGS + RUSTFLAGS='-Copt-level=3 -Cdebuginfo=2 -Ccodegen-units=1 -Cstrip=none -Cforce-frame-pointers=yes -Clink-arg=-Wl,-z,relro -Clink-arg=-Wl,-z,now -Clink-arg=-specs=/usr/lib/rpm/redhat/redhat-package-notes --cap-lints=warn' + export RUSTFLAGS + LDFLAGS='-Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes ' + export LDFLAGS + LT_SYS_LIBRARY_PATH=/usr/lib64: + export LT_SYS_LIBRARY_PATH + CC=gcc + export CC + CXX=g++ + export CXX + cd pkcs11-provider-0.2 + make check Making check in src make[1]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[1]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' Making check in tests make[1]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' make tsession tgenkey tlsctx tdigests treadkeys tfork pincache \ helpers.sh setup-softhsm.sh setup-softokn.sh softhsm-proxy.sh test-wrapper tbasic tcerts tecc tecdh tedwards tdemoca thkdf toaepsha2 trsapss tdigest ttls tpubkey tfork turi trand make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' gcc -DHAVE_CONFIG_H -I. -I../src -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o tsession-tsession.o `test -f 'tsession.c' || echo './'`tsession.c /bin/sh ../libtool --tag=CC --mode=link gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tsession tsession-tsession.o -lssl -lcrypto libtool: link: gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tsession tsession-tsession.o -lssl -lcrypto gcc -DHAVE_CONFIG_H -I. -I../src -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o tgenkey-tgenkey.o `test -f 'tgenkey.c' || echo './'`tgenkey.c /bin/sh ../libtool --tag=CC --mode=link gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tgenkey tgenkey-tgenkey.o -lssl -lcrypto libtool: link: gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tgenkey tgenkey-tgenkey.o -lssl -lcrypto gcc -DHAVE_CONFIG_H -I. -I../src -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o tlsctx-tlsctx.o `test -f 'tlsctx.c' || echo './'`tlsctx.c /bin/sh ../libtool --tag=CC --mode=link gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tlsctx tlsctx-tlsctx.o -lssl -lcrypto libtool: link: gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tlsctx tlsctx-tlsctx.o -lssl -lcrypto gcc -DHAVE_CONFIG_H -I. -I../src -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o tdigests-tdigests.o `test -f 'tdigests.c' || echo './'`tdigests.c /bin/sh ../libtool --tag=CC --mode=link gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tdigests tdigests-tdigests.o -lssl -lcrypto libtool: link: gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tdigests tdigests-tdigests.o -lssl -lcrypto gcc -DHAVE_CONFIG_H -I. -I../src -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o treadkeys-treadkeys.o `test -f 'treadkeys.c' || echo './'`treadkeys.c /bin/sh ../libtool --tag=CC --mode=link gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o treadkeys treadkeys-treadkeys.o -lssl -lcrypto libtool: link: gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o treadkeys treadkeys-treadkeys.o -lssl -lcrypto gcc -DHAVE_CONFIG_H -I. -I../src -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o tfork-tfork.o `test -f 'tfork.c' || echo './'`tfork.c /bin/sh ../libtool --tag=CC --mode=link gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tfork tfork-tfork.o -lssl -lcrypto libtool: link: gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tfork tfork-tfork.o -lssl -lcrypto gcc -DHAVE_CONFIG_H -I. -I../src -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pincache-pincache.o `test -f 'pincache.c' || echo './'`pincache.c /bin/sh ../libtool --tag=CC --mode=link gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o pincache pincache-pincache.o -lssl -lcrypto libtool: link: gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o pincache pincache-pincache.o -lssl -lcrypto make[2]: Nothing to be done for 'helpers.sh'. make[2]: Nothing to be done for 'setup-softhsm.sh'. make[2]: Nothing to be done for 'setup-softokn.sh'. make[2]: Nothing to be done for 'softhsm-proxy.sh'. make[2]: Nothing to be done for 'test-wrapper'. make[2]: Nothing to be done for 'tbasic'. make[2]: Nothing to be done for 'tcerts'. make[2]: Nothing to be done for 'tecc'. make[2]: Nothing to be done for 'tecdh'. make[2]: Nothing to be done for 'tedwards'. make[2]: Nothing to be done for 'tdemoca'. make[2]: Nothing to be done for 'thkdf'. make[2]: Nothing to be done for 'toaepsha2'. make[2]: Nothing to be done for 'trsapss'. make[2]: Nothing to be done for 'tdigest'. make[2]: Nothing to be done for 'ttls'. make[2]: Nothing to be done for 'tpubkey'. make[2]: 'tfork' is up to date. make[2]: Nothing to be done for 'turi'. make[2]: Nothing to be done for 'trand'. make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' make check-TESTS make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' make[3]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' LIBSPATH=/builddir/build/BUILD/pkcs11-provider-0.2/src/.libs \ TESTSSRCDIR=/builddir/build/BUILD/pkcs11-provider-0.2/tests \ TESTBLDDIR=/builddir/build/BUILD/pkcs11-provider-0.2/tests \ SHARED_EXT=.so \ SOFTOKNPATH="/usr/lib64/" \ /builddir/build/BUILD/pkcs11-provider-0.2/tests/setup-softokn.sh > setup-softokn.log 2>&1 LIBSPATH=/builddir/build/BUILD/pkcs11-provider-0.2/src/.libs \ TESTSSRCDIR=/builddir/build/BUILD/pkcs11-provider-0.2/tests \ TESTBLDDIR=/builddir/build/BUILD/pkcs11-provider-0.2/tests \ SHARED_EXT=.so \ P11KITCLIENTPATH="/usr/lib64/pkcs11/p11-kit-client.so" \ /builddir/build/BUILD/pkcs11-provider-0.2/tests/setup-softhsm.sh > setup-softhsm.log 2>&1 FAIL: basic-softokn.t FAIL: basic-softhsm.t PASS: pubkey-softokn.t PASS: pubkey-softhsm.t PASS: certs-softokn.t PASS: certs-softhsm.t PASS: ecc-softokn.t PASS: ecc-softhsm.t PASS: edwards-softhsm.t PASS: ecdh-softokn.t PASS: democa-softokn.t PASS: democa-softhsm.t PASS: digest-softokn.t PASS: digest-softhsm.t PASS: fork-softokn.t PASS: fork-softhsm.t PASS: oaepsha2-softokn.t PASS: hkdf-softokn.t PASS: rsapss-softokn.t PASS: genkey-softokn.t PASS: genkey-softhsm.t PASS: session-softokn.t PASS: session-softhsm.t PASS: rand-softokn.t PASS: rand-softhsm.t PASS: readkeys-softokn.t PASS: readkeys-softhsm.t FAIL: tls-softokn.t FAIL: tls-softhsm.t PASS: uri-softokn.t PASS: uri-softhsm.t ============================================================================ Testsuite summary for pkcs11-provider 0.2 ============================================================================ # TOTAL: 31 # PASS: 27 # SKIP: 0 # XFAIL: 0 # FAIL: 4 # XPASS: 0 # ERROR: 0 ============================================================================ See tests/test-suite.log Please report to simo@redhat.com ============================================================================ make[3]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' make[3]: *** [Makefile:1004: test-suite.log] Error 1 make[2]: *** [Makefile:1112: check-TESTS] Error 2 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' make[1]: *** [Makefile:1178: check-am] Error 2 make[1]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' make: *** [Makefile:476: check-recursive] Error 1 + '[' 2 -ne 0 ']' + cat tests/basic-softhsm.log tests/basic-softokn.log tests/certs-softhsm.log tests/certs-softokn.log tests/democa-softhsm.log tests/democa-softokn.log tests/digest-softhsm.log tests/digest-softokn.log tests/ecc-softhsm.log tests/ecc-softokn.log tests/ecdh-softokn.log tests/edwards-softhsm.log tests/fork-softhsm.log tests/fork-softokn.log tests/genkey-softhsm.log tests/genkey-softokn.log tests/hkdf-softokn.log tests/oaepsha2-softokn.log tests/pubkey-softhsm.log tests/pubkey-softokn.log tests/rand-softhsm.log tests/rand-softokn.log tests/readkeys-softhsm.log tests/readkeys-softokn.log tests/rsapss-softokn.log tests/session-softhsm.log tests/session-softokn.log tests/setup-softhsm.log tests/setup-softokn.log tests/test-suite.log tests/tls-softhsm.log tests/tls-softokn.log tests/uri-softhsm.log tests/uri-softokn.log Executing ./tbasic ## Raw Sign check error openssl pkeyutl -sign -inkey "${BASEURI}" -pkeyopt pad-mode:none -in ${TMPPDIR}/64Brandom.bin -out ${TMPPDIR}/raw-sig.bin Public Key operation error 2034ADB0FFFFFF00:error:0200007A:rsa routines:p11prov_sig_operate:data too small for key size:signature.c:874: ## Sign and Verify with provided Hash and RSA openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${PRIURI}" -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-sig.bin openssl pkeyutl -verify -inkey "${PUBURI}" -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-sig.bin Signature Verified Successfully ## Sign and Verify with provided Hash and RSA with DigestInfo struct openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${PRIURI}" -pkeyopt digest:sha256 -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-sig.bin openssl pkeyutl -verify -inkey "${PUBURI}" -pkeyopt digest:sha256 -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-sig.bin Signature Verified Successfully ## DigestSign and DigestVerify with RSA openssl pkeyutl -sign -inkey "${BASEURI}" -digest sha256 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha256-dgstsig.bin openssl pkeyutl -verify -inkey "${BASEURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully openssl pkeyutl -verify -inkey "${PUBURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully RSA basic encrypt and decrypt openssl pkeyutl -encrypt -inkey "${PUBURI}" -pubin -in ${SECRETFILE} -out ${SECRETFILE}.enc openssl pkeyutl -decrypt -inkey "${PRIURI}" -in ${SECRETFILE}.enc -out ${SECRETFILE}.dec ## Test Disallow Public Export openssl pkey -in $PUBURI -pubin -pubout -text ## Test CSR generation from RSA private keys openssl req -new -batch -key "${PRIURI}" -out ${TMPPDIR}/rsa_csr.pem openssl req -in ${TMPPDIR}/rsa_csr.pem -verify -noout Certificate request self-signature verify OK ## Test fetching public keys without PIN in config files openssl pkey -in $PUBURI -pubin -pubout -out ${TMPPDIR}/rsa.pub.nopin.pem openssl pkey -in $ECPUBURI -pubin -pubout -out ${TMPPDIR}/ec.pub.nopin.pem ## Test fetching public keys with a PIN in URI openssl pkey -in $BASEURIWITHPIN -pubin -pubout -out ${TMPPDIR}/rsa.pub.uripin.pem openssl pkey -in $ECBASEURIWITHPIN -pubin -pubout -out ${TMPPDIR}/ec.pub.uripin.pem ## Test prompting without PIN in config files Failed to get expected command output Original command output: Enter pass phrase for PKCS#11 Token (Slot 535649871 - SoftHSM slot ID 0x1fed5e4f): PKCS11 RSA Private Key (2048 bits) [Can't export and print private key data] URI pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=3797858b1fed5e4f;token=token_name;id=%00%01;object=testCert;type=private FAIL basic-softhsm.t (exit status: 1) Executing ./tbasic ## Raw Sign check error openssl pkeyutl -sign -inkey "${BASEURI}" -pkeyopt pad-mode:none -in ${TMPPDIR}/64Brandom.bin -out ${TMPPDIR}/raw-sig.bin Public Key operation error 20D48782FFFFFF00:error:0200007A:rsa routines:p11prov_sig_operate:data too small for key size:signature.c:874: ## Sign and Verify with provided Hash and RSA openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${PRIURI}" -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-sig.bin openssl pkeyutl -verify -inkey "${PUBURI}" -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-sig.bin Signature Verified Successfully ## Sign and Verify with provided Hash and RSA with DigestInfo struct openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${PRIURI}" -pkeyopt digest:sha256 -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-sig.bin openssl pkeyutl -verify -inkey "${PUBURI}" -pkeyopt digest:sha256 -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-sig.bin Signature Verified Successfully ## DigestSign and DigestVerify with RSA openssl pkeyutl -sign -inkey "${BASEURI}" -digest sha256 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha256-dgstsig.bin openssl pkeyutl -verify -inkey "${BASEURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully openssl pkeyutl -verify -inkey "${PUBURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully RSA basic encrypt and decrypt openssl pkeyutl -encrypt -inkey "${PUBURI}" -pubin -in ${SECRETFILE} -out ${SECRETFILE}.enc openssl pkeyutl -decrypt -inkey "${PRIURI}" -in ${SECRETFILE}.enc -out ${SECRETFILE}.dec ## Test Disallow Public Export openssl pkey -in $PUBURI -pubin -pubout -text ## Test CSR generation from RSA private keys openssl req -new -batch -key "${PRIURI}" -out ${TMPPDIR}/rsa_csr.pem openssl req -in ${TMPPDIR}/rsa_csr.pem -verify -noout Certificate request self-signature verify OK ## Test fetching public keys without PIN in config files openssl pkey -in $PUBURI -pubin -pubout -out ${TMPPDIR}/rsa.pub.nopin.pem openssl pkey -in $ECPUBURI -pubin -pubout -out ${TMPPDIR}/ec.pub.nopin.pem ## Test fetching public keys with a PIN in URI openssl pkey -in $BASEURIWITHPIN -pubin -pubout -out ${TMPPDIR}/rsa.pub.uripin.pem openssl pkey -in $ECBASEURIWITHPIN -pubin -pubout -out ${TMPPDIR}/ec.pub.uripin.pem ## Test prompting without PIN in config files Failed to get expected command output Original command output: Enter pass phrase for PKCS#11 Token (Slot 1 - NSS Internal Cryptographic Services): PKCS11 RSA Private Key (2048 bits) [Can't export and print private key data] URI pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%9A%2F%84%32%F6%ED%E0%EF%BF%A9%1E%1B%1B%D8%DF%23%33%60%40%C9;type=private FAIL basic-softokn.t (exit status: 1) Executing ./tcerts ## Check we can fetch certifiatce objects openssl x509 -in ${CRTURI} -subject -out ${TMPPDIR}/crt-subj.txt openssl x509 -in ${ECCRTURI} -subject -out ${TMPPDIR}/eccrt-subj.txt ## Use storeutl command to match specific certs via params openssl storeutl -certs -subject "${subj}" -out ${TMPPDIR}/storeutl-crt-subj.txt pkcs11:type=cert 0: Certificate openssl storeutl -certs -subject "${subj}" -out ${TMPPDIR}/storeutl-crt-subj.txt pkcs11:type=cert 0: Certificate openssl storeutl -certs -subject "${subj}" -out ${TMPPDIR}/storeutl-crt-subj.txt pkcs11:type=cert 0: Certificate openssl storeutl -certs -subject "${subj}" -out ${TMPPDIR}/storeutl-crt-subj.txt pkcs11:type=cert 0: Certificate PASS certs-softhsm.t (exit status: 0) Executing ./tcerts ## Check we can fetch certifiatce objects openssl x509 -in ${CRTURI} -subject -out ${TMPPDIR}/crt-subj.txt openssl x509 -in ${ECCRTURI} -subject -out ${TMPPDIR}/eccrt-subj.txt ## Use storeutl command to match specific certs via params openssl storeutl -certs -subject "${subj}" -out ${TMPPDIR}/storeutl-crt-subj.txt pkcs11:type=cert 0: Certificate openssl storeutl -certs -subject "${subj}" -out ${TMPPDIR}/storeutl-crt-subj.txt pkcs11:type=cert 0: Certificate openssl storeutl -certs -subject "${subj}" -out ${TMPPDIR}/storeutl-crt-subj.txt pkcs11:type=cert 0: Certificate openssl storeutl -certs -subject "${subj}" -out ${TMPPDIR}/storeutl-crt-subj.txt pkcs11:type=cert 0: Certificate PASS certs-softokn.t (exit status: 0) Executing ./tdemoca ## Set up demoCA ## Generating CA cert if needed openssl req -batch -noenc -x509 -new -key ${PRIURI} -out ${DEMOCA}/cacert.pem ## Generating a new CSR openssl req -batch -noenc -newkey rsa:2048 -subj "/CN=testing-csr-signing/O=PKCS11 Provider/C=US" -keyout ${DEMOCA}/cert.key -out ${DEMOCA}/cert.csr ....+.....+++++++++++++++++++++++++++++++++++++++*....+............+++++++++++++++++++++++++++++++++++++++*..................+.....+.+........+..........+..+.......+..+.+..+.......+...........+.............+..+....+.....+...+...+....+..............+.......+........+......+.+..+.......+...+...........+.+...+..+.+...............+.....+...............+..........+.........+...+.....+.+......+......+............+..+...+......+....+...........+......+......+.........+......+...+.+......+..............+...+.+......+...............+......+.....+...+....+...+............+.....+.......+...........+....+......+..............+.........+......+.+...+.....+.......+.....+....+..............+....+..+..........+.....+....+..+...+....+........+.......+...+..+.......+........++++++ ..+.+.....+...+......+.+........+...+...+....+...+...+..+...+....+...+..+.......+..............+++++++++++++++++++++++++++++++++++++++*..+....+........+++++++++++++++++++++++++++++++++++++++*...+........................+..+.+.....+...+....+..+.+...+.........+.....+.......+..............+..........+......+.....+.+...+.....+......+...+...+..................+............+.......++++++ ----- ## Signing the new certificate openssl ca -batch -in ${DEMOCA}/cert.csr -keyfile ${PRIURI} -out ${DEMOCA}/cert.pem Using configuration from /builddir/build/BUILD/pkcs11-provider-0.2/tests/tmp.softhsm/openssl.cnf Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows commonName :ASN.1 12:'testing-csr-signing' organizationName :ASN.1 12:'PKCS11 Provider' countryName :PRINTABLE:'US' Certificate is to be certified until Nov 26 20:35:52 2024 GMT (365 days) 2024DA84FFFFFF00:error:40800054:pkcs11:p11prov_GetOperationState:reason(84):interface.gen.c:279:Error returned by C_GetOperationState Write out database with 1 new entries Database updated ## Set up OCSP openssl req -batch -noenc -new -subj "/CN=OCSP/O=PKCS11 Provider/C=US" -key ${PRIURI} -out ${DEMOCA}/ocspSigning.csr openssl ca -batch -keyfile ${PRIURI} -cert ${DEMOCA}/cacert.pem -in ${DEMOCA}/ocspSigning.csr -out ${DEMOCA}/ocspSigning.pem Using configuration from /builddir/build/BUILD/pkcs11-provider-0.2/tests/tmp.softhsm/openssl.cnf Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows commonName :ASN.1 12:'OCSP' organizationName :ASN.1 12:'PKCS11 Provider' countryName :PRINTABLE:'US' Certificate is to be certified until Nov 26 20:35:54 2024 GMT (365 days) 20D4388FFFFFFF00:error:40800054:pkcs11:p11prov_GetOperationState:reason(84):interface.gen.c:279:Error returned by C_GetOperationState Write out database with 1 new entries Database updated ## Run OCSP ACCEPT 0.0.0.0:12345 PID=649005 openssl ocsp -CAfile ${DEMOCA}/cacert.pem -issuer ${DEMOCA}/cacert.pem -cert ${DEMOCA}/cert.pem -resp_text -noverify -url http://127.0.0.1:${PORT} ocsp: waiting for OCSP client connections... ocsp: Received request, 1st line: POST / HTTP/1.0 OCSP Request Data: Version: 1 (0x0) Requestor List: Certificate ID: Hash Algorithm: sha1 Issuer Name Hash: 810C6D581B88B8245F66B67E49B738D99BD5F7BB Issuer Key Hash: 5EC7AA9FBF3AE5A6FD8B5F8AA81095C001B7E195 Serial Number: 01 Request Extensions: OCSP Nonce: 04105A33F18C6E39434FC21DF042B7B1A3C4 OCSP Response Data: OCSP Response Status: successful (0x0) Response Type: Basic OCSP Response Version: 1 (0x0) Responder Id: C = US, O = PKCS11 Provider, CN = OCSP Produced At: Nov 27 20:35:55 2023 GMT Responses: Certificate ID: Hash Algorithm: sha1 Issuer Name Hash: 810C6D581B88B8245F66B67E49B738D99BD5F7BB Issuer Key Hash: 5EC7AA9FBF3AE5A6FD8B5F8AA81095C001B7E195 Serial Number: 01 Cert Status: good This Update: Nov 27 20:35:55 2023 GMT Response Extensions: OCSP Nonce: 04105A33F18C6E39434FC21DF042B7B1A3C4 Signature Algorithm: sha1WithRSAEncryption Signature Value: 8d:3f:bc:d7:fb:34:97:be:7b:94:b2:1f:80:b4:a4:b5:e5:9b: 96:14:e0:5e:f6:5c:2e:e3:54:06:7b:16:7d:b3:f7:80:23:3d: f9:9c:bd:f7:8e:8d:e9:75:2c:63:56:2a:7c:ab:af:03:2c:08: 2b:62:d2:8e:91:66:a3:7e:07:fa:9b:52:c2:15:af:47:b7:39: 9b:a6:c3:6d:8b:c9:f6:da:f0:e8:36:ea:8f:db:92:50:f0:40: 82:83:d6:da:63:43:1d:b9:ed:88:bf:46:b7:13:d8:4f:58:b7: 9f:14:fc:fe:02:50:b7:c4:ee:ee:0f:bb:55:4b:fc:b6:7c:c0: 66:1d:ac:95:bf:d2:fb:4b:14:84:c5:c1:f7:04:8d:ca:7d:92: 31:0b:b9:27:32:79:30:f3:2f:99:ab:28:60:41:46:03:d7:9f: 48:54:4b:7e:60:0b:11:21:00:f4:01:d9:ed:f5:66:67:90:e7: 61:72:0b:5e:3b:a7:90:7e:49:61:9a:60:15:45:06:61:a4:93: bd:9c:3b:05:2c:5f:6a:f9:2f:f5:86:21:e0:33:97:8e:96:25: 2d:ba:b1:cf:cf:b8:b3:c5:b7:dc:26:ac:8b:47:cc:7a:8a:6c: e2:0b:25:d1:a6:37:32:bd:3b:30:2a:17:09:1c:76:d9:01:18: ae:e3:00:97 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, ST=New York, L=New York, O=PKCS11 Provider, OU=Testing Harness Validity Not Before: Nov 27 20:35:54 2023 GMT Not After : Nov 26 20:35:54 2024 GMT Subject: C=US, O=PKCS11 Provider, CN=OCSP Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:b6:85:b1:8b:02:c6:57:09:87:03:14:32:ea:ea: 68:2b:ed:62:d8:fa:f7:7d:1e:31:d6:d2:10:6b:40: e6:fc:5c:3b:73:e7:64:a5:6b:e8:6e:a5:42:34:e1: 71:25:2d:d9:2c:ab:fd:5d:dd:04:0e:9a:2d:05:f8: dd:70:4e:5c:a6:80:dc:12:37:28:68:7e:a1:5b:db: c1:b5:da:77:78:25:c6:c8:7e:9a:05:6f:97:b7:11: cd:8f:d2:c0:62:bd:f6:12:f3:a5:2c:6e:c4:07:34: 01:55:90:1d:cb:ee:f9:7a:05:1d:e1:f3:f1:72:cf: 3d:67:ab:b5:12:a0:a9:2e:96:bf:6f:0a:e6:e4:28: 5f:4f:21:3a:d1:57:dc:71:f6:f7:2b:fb:57:42:82: dc:eb:06:20:fb:fa:cc:72:d9:08:3e:be:90:4c:eb: ee:99:72:62:5a:95:2e:40:91:26:de:d9:fd:2e:a9: 8b:93:8d:40:a3:30:9e:7c:ce:6d:35:15:8a:9b:a5: f3:df:d7:6e:d3:77:c4:13:b5:5e:ee:53:c5:ba:c0: 62:30:52:ba:4d:3b:aa:13:6e:47:c3:c0:ba:12:09: ca:7d:42:60:a2:d8:47:2a:ba:ae:fd:40:cc:24:17: b9:55:db:09:1a:ea:ce:17:76:4e:5b:57:74:ea:92: aa:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: CA:FALSE X509v3 Key Usage: Digital Signature, Non Repudiation, Key Encipherment X509v3 Subject Key Identifier: 5E:C7:AA:9F:BF:3A:E5:A6:FD:8B:5F:8A:A8:10:95:C0:01:B7:E1:95 X509v3 Authority Key Identifier: 5E:C7:AA:9F:BF:3A:E5:A6:FD:8B:5F:8A:A8:10:95:C0:01:B7:E1:95 S ## Kill any remaining children and wait for them /builddir/build/BUILD/pkcs11-provider-0.2/tests/helpers.sh: line 66: 649005 Killed $CHECKER openssl ocsp -index "${DEMOCA}/index.txt" -rsigner "${DEMOCA}/ocspSigning.pem" -rkey "${PRIURI}" -CA "${DEMOCA}/cacert.pem" -rmd sha1 -port "${PORT}" -text PASS democa-softhsm.t (exit status: 0) Executing ./tdemoca ## Set up demoCA ## Generating CA cert if needed openssl req -batch -noenc -x509 -new -key ${PRIURI} -out ${DEMOCA}/cacert.pem ## Generating a new CSR openssl req -batch -noenc -newkey rsa:2048 -subj "/CN=testing-csr-signing/O=PKCS11 Provider/C=US" -keyout ${DEMOCA}/cert.key -out ${DEMOCA}/cert.csr .......+....+..............+.+..+....+.....+...+...+.......+...+.....+....+......+...............+...+......+...+........+.......+......+..+...+++++++++++++++++++++++++++++++++++++++*........+...............+.+......+..+.+......+.....+.+...............+............+........+....+.....+...+.+..+...+.+...+...........+..........+.....+............+.......+..+.+.........+++++++++++++++++++++++++++++++++++++++*....+...+.......+.........+...+.....+...+......................+...+..+.+...............+..+....+.....+.+............+...+........+....+...+..++++++ ..+..+....+...+...+...+.....+++++++++++++++++++++++++++++++++++++++*......+++++++++++++++++++++++++++++++++++++++*....+..............++++++ ----- ## Signing the new certificate openssl ca -batch -in ${DEMOCA}/cert.csr -keyfile ${PRIURI} -out ${DEMOCA}/cert.pem Using configuration from /builddir/build/BUILD/pkcs11-provider-0.2/tests/tmp.softokn/openssl.cnf Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows commonName :ASN.1 12:'testing-csr-signing' organizationName :ASN.1 12:'PKCS11 Provider' countryName :PRINTABLE:'US' Certificate is to be certified until Nov 26 20:35:34 2024 GMT (365 days) 202448BFFFFFFF00:error:40800091:pkcs11:p11prov_GetOperationState:There is no active operation of appropriate type in the specified session:interface.gen.c:279:Error returned by C_GetOperationState Write out database with 1 new entries Database updated ## Set up OCSP openssl req -batch -noenc -new -subj "/CN=OCSP/O=PKCS11 Provider/C=US" -key ${PRIURI} -out ${DEMOCA}/ocspSigning.csr openssl ca -batch -keyfile ${PRIURI} -cert ${DEMOCA}/cacert.pem -in ${DEMOCA}/ocspSigning.csr -out ${DEMOCA}/ocspSigning.pem Using configuration from /builddir/build/BUILD/pkcs11-provider-0.2/tests/tmp.softokn/openssl.cnf Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows commonName :ASN.1 12:'OCSP' organizationName :ASN.1 12:'PKCS11 Provider' countryName :PRINTABLE:'US' Certificate is to be certified until Nov 26 20:35:40 2024 GMT (365 days) 20E4D8AAFFFFFF00:error:40800091:pkcs11:p11prov_GetOperationState:There is no active operation of appropriate type in the specified session:interface.gen.c:279:Error returned by C_GetOperationState Write out database with 1 new entries Database updated ## Run OCSP ACCEPT 0.0.0.0:12345 PID=648971 openssl ocsp -CAfile ${DEMOCA}/cacert.pem -issuer ${DEMOCA}/cacert.pem -cert ${DEMOCA}/cert.pem -resp_text -noverify -url http://127.0.0.1:${PORT} ocsp: waiting for OCSP client connections... ocsp: Received request, 1st line: POST / HTTP/1.0 OCSP Request Data: Version: 1 (0x0) Requestor List: Certificate ID: Hash Algorithm: sha1 Issuer Name Hash: 810C6D581B88B8245F66B67E49B738D99BD5F7BB Issuer Key Hash: BD0932500CBD2DB7B2465F2F66E3962E6DB97972 Serial Number: 01 Request Extensions: OCSP Nonce: 041012301F1D62C52B442064968D0AD9C25A OCSP Response Data: OCSP Response Status: successful (0x0) Response Type: Basic OCSP Response Version: 1 (0x0) Responder Id: C = US, O = PKCS11 Provider, CN = OCSP Produced At: Nov 27 20:35:43 2023 GMT Responses: Certificate ID: Hash Algorithm: sha1 Issuer Name Hash: 810C6D581B88B8245F66B67E49B738D99BD5F7BB Issuer Key Hash: BD0932500CBD2DB7B2465F2F66E3962E6DB97972 Serial Number: 01 Cert Status: good This Update: Nov 27 20:35:43 2023 GMT Response Extensions: OCSP Nonce: 041012301F1D62C52B442064968D0AD9C25A Signature Algorithm: sha1WithRSAEncryption Signature Value: d7:c4:19:73:f8:33:1d:d1:18:5c:f4:74:5e:cf:88:a2:fc:8e: 81:84:15:ce:1f:53:e5:3c:6f:13:c0:ad:87:b4:60:87:97:8d: 94:e6:c0:8f:1d:f3:33:7f:81:38:93:ae:a5:9e:b5:e2:09:6f: a5:59:77:15:b6:d0:a5:93:ab:b1:5b:77:bb:bf:85:a5:50:c0: 6b:98:ca:c0:c7:2c:c1:91:e8:36:2b:4e:08:95:5c:65:f5:69: f0:65:bc:39:04:ac:b2:78:52:ba:17:b8:87:50:c2:8a:ea:c7: 33:4e:f2:ef:93:b0:1d:b6:23:57:75:43:4c:0d:57:8e:42:c4: cf:a2:b0:a6:93:c7:54:62:f3:c9:48:d9:cb:b3:45:28:8b:fe: 5f:46:d3:c3:5f:bd:fe:84:43:86:15:1c:f8:6d:2d:33:3b:43: a4:c1:db:e2:5b:e5:dc:8b:bb:85:a6:3a:c8:f6:bd:ad:18:c8: d8:cb:11:98:10:db:03:2c:57:7d:41:fb:25:e5:07:10:02:d4: 8f:cc:4f:1c:cf:61:aa:b2:f1:82:9a:b9:33:fd:79:9c:43:e6: 49:69:db:cb:fb:da:82:06:bb:19:ae:86:3a:0f:3f:c9:5c:3e: 0a:19:49:ac:ca:8b:0c:c9:34:5c:56:13:ae:d6:4b:e4:9c:13: b1:d6:6e:e5 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, ST=New York, L=New York, O=PKCS11 Provider, OU=Testing Harness Validity Not Before: Nov 27 20:35:40 2023 GMT Not After : Nov 26 20:35:40 2024 GMT Subject: C=US, O=PKCS11 Provider, CN=OCSP Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:db:52:5d:8f:ae:f8:14:da:dc:64:0a:d4:6a:6b: 5b:76:0f:4d:1a:02:a2:1e:26:de:58:9d:3a:c9:a9: 53:c4:e2:63:49:e1:1c:0f:ef:78:be:b7:f1:85:d0: de:23:fa:cc:d6:13:34:db:4c:0b:9b:34:68:a9:75: a2:ec:a0:a4:85:8c:60:89:da:21:72:83:5c:25:3f: cf:bb:92:68:67:76:e8:9e:36:60:dd:3c:44:33:6e: 75:33:ac:f9:3d:c4:33:ab:55:35:b5:f7:c1:d8:b2: 81:97:8d:df:a1:09:2f:af:70:3a:3d:43:ce:62:da: 2f:a0:66:ea:38:cf:ff:b7:66:11:2d:4b:44:d4:7c: 32:5a:e4:e9:e8:7c:b1:81:76:12:2b:f6:dd:c6:7b: 4c:e2:88:d0:fa:19:c0:18:2b:16:8e:e3:a2:01:5a: 79:64:69:9e:48:5a:76:d0:47:d0:3f:7b:e0:c9:62: fb:30:20:d3:db:45:f3:df:15:49:5d:22:dc:62:8e: 10:57:0c:32:12:63:a2:36:93:cd:7f:2e:37:0d:0f: 68:aa:79:5f:6a:bc:29:28:dd:1b:f0:85:94:a5:c3: 2d:80:4b:05:61:c9:ee:3a:7b:36:fd:1e:1c:65:8f: 4e:da:6a:71:41:fb:3c:b9:04:b2:47:2c:c9:41:ea: c7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: CA:FALSE X509v3 Key Usage: Digital Signature, Non Repudiation, Key Encipherment X509v3 Subject Key Identifier: BD:09:32:50:0C:BD:2D:B7:B2:46:5F:2F:66:E3:96:2E:6D:B9:79:72 X509v3 Authority Key Identifier: BD:09:32:50:0C:BD:2D:B7:B2:46:5F:2F:66:E3:96:2E:6D:B9:79:72 S ## Kill any remaining children and wait for them /builddir/build/BUILD/pkcs11-provider-0.2/tests/helpers.sh: line 66: 648971 Killed $CHECKER openssl ocsp -index "${DEMOCA}/index.txt" -rsigner "${DEMOCA}/ocspSigning.pem" -rkey "${PRIURI}" -CA "${DEMOCA}/cacert.pem" -rmd sha1 -port "${PORT}" -text PASS democa-softokn.t (exit status: 0) Executing ./tdigest ## Test Digests support sha512-224: Unsupported by pkcs11 token sha512-256: Unsupported by pkcs11 token sha3-224: Unsupported by pkcs11 token sha3-256: Unsupported by pkcs11 token sha3-384: Unsupported by pkcs11 token sha3-512: Unsupported by pkcs11 token PASS digest-softhsm.t (exit status: 0) Executing ./tdigest ## Test Digests support sha512-224: Unsupported by pkcs11 token sha512-256: Unsupported by pkcs11 token PASS digest-softokn.t (exit status: 0) Executing ./tecc ## Export EC Public key to a file openssl pkey -in $ECPUBURI -pubin -pubout -out ${TMPPDIR}/ecout.pub Print EC Public key from private openssl pkey -in $ECPRIURI -pubout -text ## Sign and Verify with provided Hash and EC openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${ECBASEURI}" -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-ecsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-ecsig.bin Signature Verified Successfully openssl pkeyutl -verify -inkey "${TMPPDIR}/ecout.pub" -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-ecsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA-256) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha256 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha256-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA-384) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha384 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha384-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha384 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha384-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA-512) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha512 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha512-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha512 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha512-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA3-256) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha3-256 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha3-256-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha3-256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha3-256-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA3-384) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha3-384 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha3-384-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha3-384 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha3-384-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA3-512) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha3-512 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha3-512-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha3-512 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha3-512-ecdgstsig.bin Signature Verified Successfully ## Test CSR generation from private ECC keys openssl req -new -batch -key "${ECPRIURI}" -out ${TMPPDIR}/ecdsa_csr.pem openssl req -in ${TMPPDIR}/ecdsa_csr.pem -verify -noout Certificate request self-signature verify OK PASS ecc-softhsm.t (exit status: 0) Executing ./tecc ## Export EC Public key to a file openssl pkey -in $ECPUBURI -pubin -pubout -out ${TMPPDIR}/ecout.pub Print EC Public key from private openssl pkey -in $ECPRIURI -pubout -text ## Sign and Verify with provided Hash and EC openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${ECBASEURI}" -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-ecsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-ecsig.bin Signature Verified Successfully openssl pkeyutl -verify -inkey "${TMPPDIR}/ecout.pub" -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-ecsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA-256) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha256 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha256-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA-384) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha384 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha384-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha384 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha384-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA-512) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha512 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha512-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha512 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha512-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA3-256) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha3-256 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha3-256-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha3-256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha3-256-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA3-384) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha3-384 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha3-384-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha3-384 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha3-384-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA3-512) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha3-512 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha3-512-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha3-512 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha3-512-ecdgstsig.bin Signature Verified Successfully ## Test CSR generation from private ECC keys openssl req -new -batch -key "${ECPRIURI}" -out ${TMPPDIR}/ecdsa_csr.pem openssl req -in ${TMPPDIR}/ecdsa_csr.pem -verify -noout Certificate request self-signature verify OK PASS ecc-softokn.t (exit status: 0) Executing ./tecdh ## ECDH Exchange openssl pkeyutl -derive -inkey ${ECBASEURI} -peerkey ${ECPEERPUBURI} -out ${TMPPDIR}/secret.ecdh.bin PASS ecdh-softokn.t (exit status: 0) Executing ./tedwards ## Export ED25519 Public key to a file openssl pkey -in $EDPUBURI -pubin -pubout -out ${TMPPDIR}/edout.pub Print ED25519 Public key from private openssl pkey -in $EDPRIURI -pubout -text ## DigestSign and DigestVerify with ED25519 openssl pkeyutl -sign -inkey "${EDBASEURI}" -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha256-eddgstsig.bin openssl pkeyutl -verify -inkey "${EDBASEURI}" -pubin -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-eddgstsig.bin Signature Verified Successfully ## Test CSR generation from private ED25519 keys openssl req -new -batch -key "${EDPRIURI}" -out ${TMPPDIR}/ed25519_csr.pem openssl req -in ${TMPPDIR}/ed25519_csr.pem -verify -noout Certificate request self-signature verify OK PASS edwards-softhsm.t (exit status: 0) Executing ./tfork Child Done Child Done ALL A-OK! PASS fork-softhsm.t (exit status: 0) Executing ./tfork Child Done Child Done ALL A-OK! PASS fork-softokn.t (exit status: 0) Executing ./tgenkey ALL A-OK!PASS genkey-softhsm.t (exit status: 0) Executing ./tgenkey ALL A-OK!PASS genkey-softokn.t (exit status: 0) Executing ./thkdf ## HKDF Derivation openssl pkeyutl -derive -kdf HKDF -kdflen 48 -pkeyopt md:SHA256 -pkeyopt mode:EXTRACT_AND_EXPAND -pkeyopt hexkey:${HKDF_HEX_SECRET} -pkeyopt hexsalt:${HKDF_HEX_SALT} -pkeyopt hexinfo:${HKDF_HEX_INFO} -out ${TMPPDIR}/hkdf1-out-pkcs11.bin -propquery provider=pkcs11 openssl pkeyutl -derive -kdf HKDF -kdflen 48 -pkeyopt md:SHA256 -pkeyopt mode:EXTRACT_AND_EXPAND -pkeyopt hexkey:${HKDF_HEX_SECRET} -pkeyopt hexsalt:${HKDF_HEX_SALT} -pkeyopt hexinfo:${HKDF_HEX_INFO} -out ${TMPPDIR}/hkdf1-out.bin openssl pkeyutl -derive -kdf HKDF -kdflen 48 -pkeyopt md:SHA256 -pkeyopt mode:EXTRACT_AND_EXPAND -pkeyopt hexkey:${HKDF_HEX_SECRET} -pkeyopt salt:"${HKDF_SALT}" -pkeyopt info:"${HKDF_INFO}" -out ${TMPPDIR}/hkdf2-out-pkcs11.bin -propquery provider=pkcs11 openssl pkeyutl -derive -kdf HKDF -kdflen 48 -pkeyopt md:SHA256 -pkeyopt mode:EXTRACT_AND_EXPAND -pkeyopt hexkey:${HKDF_HEX_SECRET} -pkeyopt salt:"${HKDF_SALT}" -pkeyopt info:"${HKDF_INFO}" -out ${TMPPDIR}/hkdf2-out.bin PASS hkdf-softokn.t (exit status: 0) Executing ./toaepsha2 ## Encrypt and decrypt with RSA OAEP openssl pkeyutl -encrypt -inkey "${BASEURI}" -pubin -pkeyopt pad-mode:oaep -pkeyopt digest:sha256 -pkeyopt mgf1-digest:sha256 -in ${SECRETFILE} -out ${SECRETFILE}.enc openssl pkeyutl -decrypt -inkey "${PRIURI}" -pkeyopt pad-mode:oaep -pkeyopt digest:sha256 -pkeyopt mgf1-digest:sha256 -in ${SECRETFILE}.enc -out ${SECRETFILE}.dec PASS oaepsha2-softokn.t (exit status: 0) Executing ./tpubkey ## Export RSA Public key to a file openssl pkey -in $BASEURI -pubin -pubout -out ${TMPPDIR}/baseout.pub Export Public key to a file (pub-uri) openssl pkey -in $PUBURI -pubin -pubout -out ${TMPPDIR}/pubout.pub Print Public key from private openssl pkey -in $PRIURI -pubout -text ## Export Public check error openssl pkey -in pkcs11:id=%de%ad -pubin -pubout -out ${TMPPDIR}/pubout-invlid.pub Could not read key of Public Key from pkcs11:id=%de%ad ## Export EC Public key to a file openssl pkey -in $ECBASEURI -pubin -pubout -out ${TMPPDIR}/baseecout.pub Export EC Public key to a file (pub-uri) openssl pkey -in $ECPUBURI -pubin -pubout -out ${TMPPDIR}/pubecout.pub Print EC Public key from private openssl pkey -in $ECPRIURI -pubout -text ## Check we can get RSA public keys from certificate objects Export Public key to a file (priv-uri) openssl pkey -in $PRI2URI -pubout -out ${TMPPDIR}/priv-cert.pub Export Public key to a file (base-uri) openssl pkey -in $BASE2URI -pubout -out ${TMPPDIR}/base-cert.pub Export Public EC key to a file (priv-uri) openssl pkey -in $ECPRI2URI -pubout -out ${TMPPDIR}/ec-priv-cert.pub Export Public key to a file (base-uri) openssl pkey -in $ECBASE2URI -pubout -out ${TMPPDIR}/ec-base-cert.pub PASS pubkey-softhsm.t (exit status: 0) Executing ./tpubkey ## Export RSA Public key to a file openssl pkey -in $BASEURI -pubin -pubout -out ${TMPPDIR}/baseout.pub Export Public key to a file (pub-uri) openssl pkey -in $PUBURI -pubin -pubout -out ${TMPPDIR}/pubout.pub Print Public key from private openssl pkey -in $PRIURI -pubout -text ## Export Public check error openssl pkey -in pkcs11:id=%de%ad -pubin -pubout -out ${TMPPDIR}/pubout-invlid.pub Could not read key of Public Key from pkcs11:id=%de%ad ## Export EC Public key to a file openssl pkey -in $ECBASEURI -pubin -pubout -out ${TMPPDIR}/baseecout.pub Export EC Public key to a file (pub-uri) openssl pkey -in $ECPUBURI -pubin -pubout -out ${TMPPDIR}/pubecout.pub Print EC Public key from private openssl pkey -in $ECPRIURI -pubout -text PASS pubkey-softokn.t (exit status: 0) Executing ./trand ## Test PKCS11 RNG openssl rand 1 20440BB1FFFFFF00:error:0308010C:digital envelope routines:inner_evp_generic_fetch:unsupported:crypto/evp/evp_fetch.c:341:Global default library context, Algorithm (PKCS11-RAND : 0), Properties () 20440BB1FFFFFF00:error:12000090:random number generator:rand_new_drbg:unable to fetch drbg:crypto/rand/rand_lib.c:647: openssl rand 1 � PASS rand-softhsm.t (exit status: 0) Executing ./trand ## Test PKCS11 RNG openssl rand 1 2094F888FFFFFF00:error:0308010C:digital envelope routines:inner_evp_generic_fetch:unsupported:crypto/evp/evp_fetch.c:341:Global default library context, Algorithm (PKCS11-RAND : 0), Properties () 2094F888FFFFFF00:error:12000090:random number generator:rand_new_drbg:unable to fetch drbg:crypto/rand/rand_lib.c:647: openssl rand 1 L PASS rand-softokn.t (exit status: 0) Executing ./treadkeys PASS readkeys-softhsm.t (exit status: 0) Executing ./treadkeys PASS readkeys-softokn.t (exit status: 0) Executing ./trsapss ## DigestSign and DigestVerify with RSA PSS openssl pkeyutl -sign -inkey "${BASEURI}" -digest sha256 -pkeyopt pad-mode:pss -pkeyopt mgf1-digest:sha256 -pkeyopt saltlen:digest -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha256-dgstsig.bin openssl pkeyutl -verify -inkey "${BASEURI}" -pubin -digest sha256 -pkeyopt pad-mode:pss -pkeyopt mgf1-digest:sha256 -pkeyopt saltlen:digest -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully Re-verify using OpenSSL default provider openssl pkeyutl -verify -inkey "${PUBURI}" -pubin -digest sha256 -pkeyopt pad-mode:pss -pkeyopt mgf1-digest:sha256 -pkeyopt saltlen:digest -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully PASS rsapss-softokn.t (exit status: 0) Executing ./tsession ALL A-OK!PASS session-softhsm.t (exit status: 0) Executing ./tsession ALL A-OK!PASS session-softokn.t (exit status: 0) ######################################## ## Searching for SoftHSM PKCS#11 library Using softhsm path /usr/lib64/pkcs11/libsofthsm2.so ######################################## ## Set up testing system Slot 0 has a free/uninitialized token. The token has been initialized and is reassigned to slot 535649871 Creating new Self Sign CA Using slot 0 with a present token (0x1fed5e4f) Key pair generated: Private Key Object; RSA label: caCert ID: 0000 Usage: decrypt, sign, unwrap Access: sensitive, always sensitive, never extractable, local Public Key Object; RSA 2048 bits label: caCert ID: 0000 Usage: encrypt, verify, wrap Access: local Generating a self signed certificate... X.509 Certificate Information: Version: 3 Serial Number (hex): 01 Validity: Not Before: Mon Nov 27 20:32:38 UTC 2023 Not After: Tue Nov 26 20:32:38 UTC 2024 Subject: CN=Issuer Subject Public Key Algorithm: RSA Algorithm Security Level: Medium (2048 bits) Modulus (bits 2048): 00:d5:2c:3a:86:30:1c:6a:47:f0:f7:c3:0f:a2:2b:3f 9c:a5:ef:6f:a3:83:af:4f:e0:48:31:f5:b0:d1:c7:08 80:99:da:a6:ea:d9:ec:c7:42:d4:bd:db:6a:8e:d5:2f 48:31:1e:c5:23:ba:15:55:19:07:8b:73:71:91:b1:67 83:ff:74:6e:56:83:38:20:dc:59:13:c5:99:dc:23:6b a5:d8:5a:9b:f9:de:dd:ce:50:35:b0:b4:48:12:88:e8 82:7c:16:49:39:a7:94:d9:d3:33:ac:e9:fa:21:e6:08 9b:9c:03:a1:7a:de:78:57:87:c5:ef:5f:70:6b:b4:58 86:db:3c:6b:81:16:43:44:22:21:52:88:e2:b8:1b:73 00:af:9d:f3:0c:26:ab:20:74:e3:a7:5a:ac:39:54:69 a7:ed:32:25:ff:4a:37:71:19:e5:f1:54:50:b3:bf:b5 d9:2a:e8:d1:43:b4:53:c6:60:ea:bc:96:af:98:e2:92 6c:90:9f:96:e0:b3:d2:a4:ef:88:db:d5:d9:8c:91:52 3d:91:8f:5e:fc:18:dd:d1:0e:06:13:f3:67:ad:87:38 a4:96:11:3c:03:65:e2:b0:18:04:a1:62:b9:53:9c:cf ef:b4:8a:67:90:d1:8f:0c:c7:04:50:9f:c3:f9:b4:ff 99 Exponent (bits 24): 01:00:01 Extensions: Basic Constraints (critical): Certificate Authority (CA): TRUE Subject Alternative Name (not critical): RFC822Name: testcert@example.org Key Usage (critical): Digital signature. Subject Key Identifier (not critical): 62818a6b4a5505466bc3cae2166e5c97dc4e54b6 Other Information: Public Key ID: sha1:62818a6b4a5505466bc3cae2166e5c97dc4e54b6 sha256:9a3fae5ca22ab25814a527ac9b89f7155096a9dc5bde06028d5382a2a41c460e Public Key PIN: pin-sha256:mj+uXKIqslgUpSesm4n3FVCWqdxb3gYCjVOCoqQcRg4= Signing certificate... Using slot 0 with a present token (0x1fed5e4f) Created certificate: Certificate Object; type = X.509 cert label: caCert subject: DN: CN=Issuer serial: 01 ID: 0000 Using slot 0 with a present token (0x1fed5e4f) Key pair generated: Private Key Object; RSA label: testCert ID: 0001 Usage: decrypt, sign, unwrap Access: sensitive, always sensitive, never extractable, local Public Key Object; RSA 2048 bits label: testCert ID: 0001 Usage: encrypt, verify, wrap Access: local Generating a signed certificate... Expiration time: Tue Nov 26 15:32:42 2024 CA expiration time: Tue Nov 26 15:32:38 2024 Warning: The time set exceeds the CA's expiration time X.509 Certificate Information: Version: 3 Serial Number (hex): 03 Validity: Not Before: Mon Nov 27 20:32:42 UTC 2023 Not After: Tue Nov 26 20:32:42 UTC 2024 Subject: CN=My Test Cert,O=PKCS11 Provider Subject Public Key Algorithm: RSA Algorithm Security Level: Medium (2048 bits) Modulus (bits 2048): 00:b6:85:b1:8b:02:c6:57:09:87:03:14:32:ea:ea:68 2b:ed:62:d8:fa:f7:7d:1e:31:d6:d2:10:6b:40:e6:fc 5c:3b:73:e7:64:a5:6b:e8:6e:a5:42:34:e1:71:25:2d d9:2c:ab:fd:5d:dd:04:0e:9a:2d:05:f8:dd:70:4e:5c a6:80:dc:12:37:28:68:7e:a1:5b:db:c1:b5:da:77:78 25:c6:c8:7e:9a:05:6f:97:b7:11:cd:8f:d2:c0:62:bd f6:12:f3:a5:2c:6e:c4:07:34:01:55:90:1d:cb:ee:f9 7a:05:1d:e1:f3:f1:72:cf:3d:67:ab:b5:12:a0:a9:2e 96:bf:6f:0a:e6:e4:28:5f:4f:21:3a:d1:57:dc:71:f6 f7:2b:fb:57:42:82:dc:eb:06:20:fb:fa:cc:72:d9:08 3e:be:90:4c:eb:ee:99:72:62:5a:95:2e:40:91:26:de d9:fd:2e:a9:8b:93:8d:40:a3:30:9e:7c:ce:6d:35:15 8a:9b:a5:f3:df:d7:6e:d3:77:c4:13:b5:5e:ee:53:c5 ba:c0:62:30:52:ba:4d:3b:aa:13:6e:47:c3:c0:ba:12 09:ca:7d:42:60:a2:d8:47:2a:ba:ae:fd:40:cc:24:17 b9:55:db:09:1a:ea:ce:17:76:4e:5b:57:74:ea:92:aa 49 Exponent (bits 24): 01:00:01 Extensions: Basic Constraints (critical): Certificate Authority (CA): FALSE Subject Alternative Name (not critical): RFC822Name: testcert@example.org Key Usage (critical): Digital signature. Key encipherment. Subject Key Identifier (not critical): c66efeacacc469053202530382e15ebed578d11c Authority Key Identifier (not critical): 62818a6b4a5505466bc3cae2166e5c97dc4e54b6 Other Information: Public Key ID: sha1:c66efeacacc469053202530382e15ebed578d11c sha256:1a51b1cb3c15cfc0590f3ca698fc9d7461082b412e0414594f43a5156f339d99 Public Key PIN: pin-sha256:GlGxyzwVz8BZDzymmPyddGEIK0EuBBRZT0OlFW8znZk= Signing certificate... Using slot 0 with a present token (0x1fed5e4f) Created certificate: Certificate Object; type = X.509 cert label: testCert subject: DN: O=PKCS11 Provider, CN=My Test Cert serial: 03 ID: 0001 RSA PKCS11 URIS pkcs11:id=%00%01;pin-value=12345678 pkcs11:id=%00%01 pkcs11:type=public;id=%00%01 pkcs11:type=private;id=%00%01 pkcs11:type=cert;object=testCert Using slot 0 with a present token (0x1fed5e4f) Key pair generated: Private Key Object; EC label: ecCert ID: 0002 Usage: decrypt, sign, unwrap, derive Access: sensitive, always sensitive, never extractable, local Public Key Object; EC EC_POINT 256 bits EC_POINT: 04410477fe6638bde3268cb9ee4cfc3a69c53ab5f46f0a9e733e9d4ef965f5dc594ac69087806c67d2402af268c7be54784e7e1ce74e792e58b408d920bfe49145ea0d EC_PARAMS: 06082a8648ce3d030107 label: ecCert ID: 0002 Usage: encrypt, verify, wrap, derive Access: local Generating a signed certificate... Expiration time: Tue Nov 26 15:32:44 2024 CA expiration time: Tue Nov 26 15:32:38 2024 Warning: The time set exceeds the CA's expiration time X.509 Certificate Information: Version: 3 Serial Number (hex): 04 Validity: Not Before: Mon Nov 27 20:32:44 UTC 2023 Not After: Tue Nov 26 20:32:44 UTC 2024 Subject: CN=My EC Cert,O=PKCS11 Provider Subject Public Key Algorithm: EC/ECDSA Algorithm Security Level: High (256 bits) Curve: SECP256R1 X: 77:fe:66:38:bd:e3:26:8c:b9:ee:4c:fc:3a:69:c5:3a b5:f4:6f:0a:9e:73:3e:9d:4e:f9:65:f5:dc:59:4a:c6 Y: 00:90:87:80:6c:67:d2:40:2a:f2:68:c7:be:54:78:4e 7e:1c:e7:4e:79:2e:58:b4:08:d9:20:bf:e4:91:45:ea 0d Extensions: Basic Constraints (critical): Certificate Authority (CA): FALSE Subject Alternative Name (not critical): RFC822Name: testcert@example.org Key Usage (critical): Digital signature. Subject Key Identifier (not critical): d71f0125ba50ea90bd0a562cb3c4f7cc1eebaaad Authority Key Identifier (not critical): 62818a6b4a5505466bc3cae2166e5c97dc4e54b6 Other Information: Public Key ID: sha1:d71f0125ba50ea90bd0a562cb3c4f7cc1eebaaad sha256:89e3239051b0f7ed85f19c331251366cf853cf066f960c60f003bf019d462c02 Public Key PIN: pin-sha256:ieMjkFGw9+2F8ZwzElE2bPhTzwZvlgxg8AO/AZ1GLAI= Signing certificate... Using slot 0 with a present token (0x1fed5e4f) Created certificate: Certificate Object; type = X.509 cert label: ecCert subject: DN: O=PKCS11 Provider, CN=My EC Cert serial: 04 ID: 0002 Using slot 0 with a present token (0x1fed5e4f) Key pair generated: Private Key Object; EC label: ecPeerCert ID: 0003 Usage: decrypt, sign, unwrap, derive Access: sensitive, always sensitive, never extractable, local Public Key Object; EC EC_POINT 256 bits EC_POINT: 044104e93c26728de2954832a6d6f9a31cfe43f8cee84aba71d09525b38a13421fc4f69cb5838bc9a2b4e5d7f981f1c06583455c786c793fe8fd8a8c763f5593da639a EC_PARAMS: 06082a8648ce3d030107 label: ecPeerCert ID: 0003 Usage: encrypt, verify, wrap, derive Access: local Generating a signed certificate... Expiration time: Tue Nov 26 15:32:47 2024 CA expiration time: Tue Nov 26 15:32:38 2024 Warning: The time set exceeds the CA's expiration time X.509 Certificate Information: Version: 3 Serial Number (hex): 05 Validity: Not Before: Mon Nov 27 20:32:47 UTC 2023 Not After: Tue Nov 26 20:32:47 UTC 2024 Subject: CN=My Peer EC Cert,O=PKCS11 Provider Subject Public Key Algorithm: EC/ECDSA Algorithm Security Level: High (256 bits) Curve: SECP256R1 X: 00:e9:3c:26:72:8d:e2:95:48:32:a6:d6:f9:a3:1c:fe 43:f8:ce:e8:4a:ba:71:d0:95:25:b3:8a:13:42:1f:c4 f6 Y: 00:9c:b5:83:8b:c9:a2:b4:e5:d7:f9:81:f1:c0:65:83 45:5c:78:6c:79:3f:e8:fd:8a:8c:76:3f:55:93:da:63 9a Extensions: Basic Constraints (critical): Certificate Authority (CA): FALSE Subject Alternative Name (not critical): RFC822Name: testcert@example.org Key Usage (critical): Digital signature. Subject Key Identifier (not critical): fdd210265386a656b3d801476cb13ceeaedb8cdd Authority Key Identifier (not critical): 62818a6b4a5505466bc3cae2166e5c97dc4e54b6 Other Information: Public Key ID: sha1:fdd210265386a656b3d801476cb13ceeaedb8cdd sha256:edf22281c4b91b48f8103fdd3dbce72f808cea1a3aefdf523b2dc84bd48aa65a Public Key PIN: pin-sha256:7fIigcS5G0j4ED/dPbznL4CM6ho6799SOy3IS9SKplo= Signing certificate... Using slot 0 with a present token (0x1fed5e4f) Created certificate: Certificate Object; type = X.509 cert label: ecPeerCert subject: DN: O=PKCS11 Provider, CN=My Peer EC Cert serial: 05 ID: 0003 EC PKCS11 URIS pkcs11:id=%00%02;pin-value=12345678 pkcs11:id=%00%02 pkcs11:type=public;id=%00%02 pkcs11:type=private;id=%00%02 pkcs11:type=cert;object=ecCert pkcs11:id=%00%03;pin-value=12345678 pkcs11:id=%00%03 pkcs11:type=public;id=%00%03 pkcs11:type=private;id=%00%03 pkcs11:type=cert;object=ecPeerCert Using slot 0 with a present token (0x1fed5e4f) Key pair generated: Private Key Object; EC_EDWARDS label: edCert ID: 0004 Usage: decrypt, sign, unwrap, derive Access: sensitive, always sensitive, never extractable, local Public Key Object; EC_EDWARDS EC_POINT 255 bits EC_POINT: 042074f264f11543bb6f653caaa8472000712c42334cb9960c057d2a7fc3daf276f6 EC_PARAMS: 130c656477617264733235353139 (OID 2.21.100.119.97.114.100.115.50.53.53.49.57) label: edCert ID: 0004 Usage: encrypt, verify, wrap, derive Access: local Generating a signed certificate... Expiration time: Tue Nov 26 15:32:51 2024 CA expiration time: Tue Nov 26 15:32:38 2024 Warning: The time set exceeds the CA's expiration time X.509 Certificate Information: Version: 3 Serial Number (hex): 06 Validity: Not Before: Mon Nov 27 20:32:51 UTC 2023 Not After: Tue Nov 26 20:32:51 UTC 2024 Subject: CN=My ED25519 Cert,O=PKCS11 Provider Subject Public Key Algorithm: EdDSA (Ed25519) Algorithm Security Level: High (256 bits) Curve: Ed25519 X: 74:f2:64:f1:15:43:bb:6f:65:3c:aa:a8:47:20:00:71 2c:42:33:4c:b9:96:0c:05:7d:2a:7f:c3:da:f2:76:f6 Extensions: Basic Constraints (critical): Certificate Authority (CA): FALSE Subject Alternative Name (not critical): RFC822Name: testcert@example.org Key Usage (critical): Digital signature. Subject Key Identifier (not critical): 6070a527e1307433101d47f27d5d6a8bf5c74699 Authority Key Identifier (not critical): 62818a6b4a5505466bc3cae2166e5c97dc4e54b6 Other Information: Public Key ID: sha1:6070a527e1307433101d47f27d5d6a8bf5c74699 sha256:d713267d92f0b166f146aea11bd8a0d0cdd6f05359ce123ce7b6fbf13944bf2b Public Key PIN: pin-sha256:1xMmfZLwsWbxRq6hG9ig0M3W8FNZzhI857b78TlEvys= Signing certificate... Using slot 0 with a present token (0x1fed5e4f) Created certificate: Certificate Object; type = X.509 cert label: edCert subject: DN: O=PKCS11 Provider, CN=My ED25519 Cert serial: 06 ID: 0004 ED25519 PKCS11 URIS pkcs11:id=%00%04 pkcs11:type=public;id=%00%04 pkcs11:type=private;id=%00%04 pkcs11:type=cert;object=edCert ## generate RSA key pair, self-signed certificate, remove public key Using slot 0 with a present token (0x1fed5e4f) Key pair generated: Private Key Object; RSA label: testCert2 ID: 0005 Usage: decrypt, sign, unwrap Access: sensitive, always sensitive, never extractable, local Public Key Object; RSA 2048 bits label: testCert2 ID: 0005 Usage: encrypt, verify, wrap Access: local Generating a signed certificate... Expiration time: Tue Nov 26 15:32:54 2024 CA expiration time: Tue Nov 26 15:32:38 2024 Warning: The time set exceeds the CA's expiration time X.509 Certificate Information: Version: 3 Serial Number (hex): 07 Validity: Not Before: Mon Nov 27 20:32:54 UTC 2023 Not After: Tue Nov 26 20:32:54 UTC 2024 Subject: CN=My Test Cert 2,O=PKCS11 Provider Subject Public Key Algorithm: RSA Algorithm Security Level: Medium (2048 bits) Modulus (bits 2048): 00:c3:ab:89:61:b4:f0:2f:72:24:07:72:be:65:20:29 bc:b6:ef:2f:bc:97:e9:81:2e:4f:6e:f5:e2:3c:32:06 62:ea:12:22:f3:56:55:49:29:95:1b:f6:26:84:9d:a5 a0:3c:18:40:6c:45:27:dd:1c:17:69:11:c0:a7:7e:31 38:9b:89:3c:0c:f0:6d:48:0a:47:62:2d:ae:25:da:55 74:53:5b:d8:be:0c:4b:34:9d:d1:3a:c5:80:41:fb:47 ac:f3:44:60:f6:70:f2:fb:53:28:20:69:6b:93:c6:fe b7:80:15:9d:b1:ff:b2:37:1c:f4:99:cb:ad:b1:06:48 df:d7:3d:95:86:7e:7f:76:aa:36:d9:bc:22:72:93:29 8b:6f:63:16:be:9f:78:d8:68:a7:39:b7:cd:86:24:c3 66:c7:ab:03:b0:f2:30:6c:95:93:63:ff:50:c3:49:a0 67:46:a6:21:6f:70:3f:db:53:65:06:22:d1:b4:06:ca 3a:fe:8a:06:a0:41:bf:b6:4b:51:9c:32:b4:b1:93:9c 21:da:b0:cc:6e:93:ff:ea:b9:d1:13:36:ef:3f:f3:35 2f:b7:fa:e1:08:1b:27:89:72:7a:27:87:8d:9a:0c:10 35:43:a2:07:40:06:22:39:9a:2c:68:c5:8c:fb:2a:ea 9f Exponent (bits 24): 01:00:01 Extensions: Basic Constraints (critical): Certificate Authority (CA): FALSE Subject Alternative Name (not critical): RFC822Name: testcert@example.org Key Usage (critical): Digital signature. Key encipherment. Subject Key Identifier (not critical): b0b65e4e892384161ee08b9195b564726fc892db Authority Key Identifier (not critical): 62818a6b4a5505466bc3cae2166e5c97dc4e54b6 Other Information: Public Key ID: sha1:b0b65e4e892384161ee08b9195b564726fc892db sha256:e9741113e09f1fc7049fb9348c2227b98191510515e99e6b2afa56c9870cf940 Public Key PIN: pin-sha256:6XQRE+CfH8cEn7k0jCInuYGRUQUV6Z5rKvpWyYcM+UA= Signing certificate... Using slot 0 with a present token (0x1fed5e4f) Created certificate: Certificate Object; type = X.509 cert label: testCert2 subject: DN: O=PKCS11 Provider, CN=My Test Cert 2 serial: 07 ID: 0005 Using slot 0 with a present token (0x1fed5e4f) RSA2 PKCS11 URIS pkcs11:id=%00%05;pin-value=12345678 pkcs11:id=%00%05 pkcs11:type=private;id=%00%05 pkcs11:type=cert;object=testCert2 ## generate EC key pair, self-signed certificate, remove public key Using slot 0 with a present token (0x1fed5e4f) Key pair generated: Private Key Object; EC label: ecCert2 ID: 0006 Usage: decrypt, sign, unwrap, derive Access: sensitive, always sensitive, never extractable, local Public Key Object; EC EC_POINT 384 bits EC_POINT: 046104e11d3c41346f5e57fbf594a4bc45a908ff92dde074fa3a07384acd23b715cb3621f96ee99cdd53313d80c671af3be0a74a10a7190346ab3008963bc8190f291f388e6901c89e90cdca9e84ac8c4d49b48721ae92b911a224df8a012c3e33ac95 EC_PARAMS: 06052b81040022 label: ecCert2 ID: 0006 Usage: encrypt, verify, wrap, derive Access: local Generating a signed certificate... Expiration time: Tue Nov 26 15:32:58 2024 CA expiration time: Tue Nov 26 15:32:38 2024 Warning: The time set exceeds the CA's expiration time X.509 Certificate Information: Version: 3 Serial Number (hex): 08 Validity: Not Before: Mon Nov 27 20:32:58 UTC 2023 Not After: Tue Nov 26 20:32:58 UTC 2024 Subject: CN=My EC Cert 2,O=PKCS11 Provider Subject Public Key Algorithm: EC/ECDSA Algorithm Security Level: Ultra (384 bits) Curve: SECP384R1 X: 00:e1:1d:3c:41:34:6f:5e:57:fb:f5:94:a4:bc:45:a9 08:ff:92:dd:e0:74:fa:3a:07:38:4a:cd:23:b7:15:cb 36:21:f9:6e:e9:9c:dd:53:31:3d:80:c6:71:af:3b:e0 a7 Y: 4a:10:a7:19:03:46:ab:30:08:96:3b:c8:19:0f:29:1f 38:8e:69:01:c8:9e:90:cd:ca:9e:84:ac:8c:4d:49:b4 87:21:ae:92:b9:11:a2:24:df:8a:01:2c:3e:33:ac:95 Extensions: Basic Constraints (critical): Certificate Authority (CA): FALSE Subject Alternative Name (not critical): RFC822Name: testcert@example.org Key Usage (critical): Digital signature. Subject Key Identifier (not critical): 41ed4ab36163675d2f0effa64c603c0185da5213 Authority Key Identifier (not critical): 62818a6b4a5505466bc3cae2166e5c97dc4e54b6 Other Information: Public Key ID: sha1:41ed4ab36163675d2f0effa64c603c0185da5213 sha256:d2ae5e35db388331c302e888fbcc12361f80ed17e54bfecad28628f571e0ff4b Public Key PIN: pin-sha256:0q5eNds4gzHDAuiI+8wSNh+A7RflS/7K0oYo9XHg/0s= Signing certificate... Using slot 0 with a present token (0x1fed5e4f) Created certificate: Certificate Object; type = X.509 cert label: ecCert2 subject: DN: O=PKCS11 Provider, CN=My EC Cert 2 serial: 08 ID: 0006 Using slot 0 with a present token (0x1fed5e4f) EC2 PKCS11 URIS pkcs11:id=%00%06;pin-value=12345678 pkcs11:id=%00%06 pkcs11:type=private;id=%00%06 pkcs11:type=cert;object=ecCert2 ## Show contents of softhsm token ---------------------------------------------------------------------------------------------------- Using slot 0 with a present token (0x1fed5e4f) Certificate Object; type = X.509 cert label: testCert subject: DN: O=PKCS11 Provider, CN=My Test Cert serial: 03 ID: 0001 Public Key Object; EC EC_POINT 256 bits EC_POINT: 04410477fe6638bde3268cb9ee4cfc3a69c53ab5f46f0a9e733e9d4ef965f5dc594ac69087806c67d2402af268c7be54784e7e1ce74e792e58b408d920bfe49145ea0d EC_PARAMS: 06082a8648ce3d030107 label: ecCert ID: 0002 Usage: encrypt, verify, wrap, derive Access: local Certificate Object; type = X.509 cert label: edCert subject: DN: O=PKCS11 Provider, CN=My ED25519 Cert serial: 06 ID: 0004 Private Key Object; RSA label: testCert ID: 0001 Usage: decrypt, sign, unwrap Access: sensitive, always sensitive, never extractable, local Private Key Object; EC label: ecCert2 ID: 0006 Usage: decrypt, sign, unwrap, derive Access: sensitive, always sensitive, never extractable, local Certificate Object; type = X.509 cert label: testCert2 subject: DN: O=PKCS11 Provider, CN=My Test Cert 2 serial: 07 ID: 0005 Public Key Object; RSA 2048 bits label: testCert ID: 0001 Usage: encrypt, verify, wrap Access: local Private Key Object; EC_EDWARDS label: edCert ID: 0004 Usage: decrypt, sign, unwrap, derive Access: sensitive, always sensitive, never extractable, local Certificate Object; type = X.509 cert label: caCert subject: DN: CN=Issuer serial: 01 ID: 0000 Public Key Object; EC_EDWARDS EC_POINT 255 bits EC_POINT: 042074f264f11543bb6f653caaa8472000712c42334cb9960c057d2a7fc3daf276f6 EC_PARAMS: 130c656477617264733235353139 (OID 2.21.100.119.97.114.100.115.50.53.53.49.57) label: edCert ID: 0004 Usage: encrypt, verify, wrap, derive Access: local Certificate Object; type = X.509 cert label: ecCert2 subject: DN: O=PKCS11 Provider, CN=My EC Cert 2 serial: 08 ID: 0006 Public Key Object; RSA 2048 bits label: caCert ID: 0000 Usage: encrypt, verify, wrap Access: local Certificate Object; type = X.509 cert label: ecCert subject: DN: O=PKCS11 Provider, CN=My EC Cert serial: 04 ID: 0002 Private Key Object; EC label: ecPeerCert ID: 0003 Usage: decrypt, sign, unwrap, derive Access: sensitive, always sensitive, never extractable, local Public Key Object; EC EC_POINT 256 bits EC_POINT: 044104e93c26728de2954832a6d6f9a31cfe43f8cee84aba71d09525b38a13421fc4f69cb5838bc9a2b4e5d7f981f1c06583455c786c793fe8fd8a8c763f5593da639a EC_PARAMS: 06082a8648ce3d030107 label: ecPeerCert ID: 0003 Usage: encrypt, verify, wrap, derive Access: local Private Key Object; RSA label: caCert ID: 0000 Usage: decrypt, sign, unwrap Access: sensitive, always sensitive, never extractable, local Private Key Object; EC label: ecCert ID: 0002 Usage: decrypt, sign, unwrap, derive Access: sensitive, always sensitive, never extractable, local Private Key Object; RSA label: testCert2 ID: 0005 Usage: decrypt, sign, unwrap Access: sensitive, always sensitive, never extractable, local Certificate Object; type = X.509 cert label: ecPeerCert subject: DN: O=PKCS11 Provider, CN=My Peer EC Cert serial: 05 ID: 0003 ---------------------------------------------------------------------------------------------------- ## Output configurations Generate openssl config file Export test variables to tmp.softhsm/testvars ## ######################################## ######################################## ## Set up testing system Creating new NSS Database Creating new Self Sign CA Creating Certificate request for 'My Test Cert' RSA PKCS11 URIS pkcs11:id=%9a%2f%84%32%f6%ed%e0%ef%bf%a9%1e%1b%1b%d8%df%23%33%60%40%c9;pin-value=12345678 pkcs11:id=%9a%2f%84%32%f6%ed%e0%ef%bf%a9%1e%1b%1b%d8%df%23%33%60%40%c9 pkcs11:type=public;id=%9a%2f%84%32%f6%ed%e0%ef%bf%a9%1e%1b%1b%d8%df%23%33%60%40%c9 pkcs11:type=private;id=%9a%2f%84%32%f6%ed%e0%ef%bf%a9%1e%1b%1b%d8%df%23%33%60%40%c9 pkcs11:type=cert;object=testCert Creating Certificate request for 'My EC Cert' Creating Certificate request for 'My Peer EC Cert' EC PKCS11 URIS pkcs11:id=%ca%19%c3%02%9c%c3%9b%35%29%c0%4d%f5%27%93%4b%34%b7%1b%76%cb;pin-value=12345678 pkcs11:id=%ca%19%c3%02%9c%c3%9b%35%29%c0%4d%f5%27%93%4b%34%b7%1b%76%cb pkcs11:type=public;id=%ca%19%c3%02%9c%c3%9b%35%29%c0%4d%f5%27%93%4b%34%b7%1b%76%cb pkcs11:type=private;id=%ca%19%c3%02%9c%c3%9b%35%29%c0%4d%f5%27%93%4b%34%b7%1b%76%cb pkcs11:type=cert;object=ecCert pkcs11:id=%55%b8%ec%13%4d%91%54%a9%75%74%78%b4%7e%48%b3%cf%8d%96%51%c1 pkcs11:type=public;id=%55%b8%ec%13%4d%91%54%a9%75%74%78%b4%7e%48%b3%cf%8d%96%51%c1 pkcs11:type=private;id=%55%b8%ec%13%4d%91%54%a9%75%74%78%b4%7e%48%b3%cf%8d%96%51%c1 pkcs11:type=cert;object=ecPeerCert ## Show contents of softoken ---------------------------------------------------------------------------------------------------- Certificate Nickname Trust Attributes SSL,S/MIME,JAR/XPI selfCA Cu,Cu,Cu testCert u,u,u ecCert u,u,u ecPeerCert u,u,u certutil: Checking token "NSS Certificate DB" in slot "NSS User Private Key and Certificate Services" < 0> rsa 99043d80a49b830787ed7863829a0240db4a7b7e NSS Certificate DB:selfCA < 1> rsa 9a2f8432f6ede0efbfa91e1b1bd8df23336040c9 NSS Certificate DB:testCert < 2> ec ca19c3029cc39b3529c04df527934b34b71b76cb NSS Certificate DB:ecCert < 3> ec 55b8ec134d9154a9757478b47e48b3cf8d9651c1 NSS Certificate DB:ecPeerCert ---------------------------------------------------------------------------------------------------- ## Output configurations Generate openssl config file Export tests variables to tmp.softokn/testvars ## ######################################## =============================================== pkcs11-provider 0.2: tests/test-suite.log =============================================== # TOTAL: 31 # PASS: 27 # SKIP: 0 # XFAIL: 0 # FAIL: 4 # XPASS: 0 # ERROR: 0 .. contents:: :depth: 2 FAIL: basic-softokn =================== Executing ./tbasic ## Raw Sign check error openssl pkeyutl -sign -inkey "${BASEURI}" -pkeyopt pad-mode:none -in ${TMPPDIR}/64Brandom.bin -out ${TMPPDIR}/raw-sig.bin Public Key operation error 20D48782FFFFFF00:error:0200007A:rsa routines:p11prov_sig_operate:data too small for key size:signature.c:874: ## Sign and Verify with provided Hash and RSA openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${PRIURI}" -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-sig.bin openssl pkeyutl -verify -inkey "${PUBURI}" -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-sig.bin Signature Verified Successfully ## Sign and Verify with provided Hash and RSA with DigestInfo struct openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${PRIURI}" -pkeyopt digest:sha256 -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-sig.bin openssl pkeyutl -verify -inkey "${PUBURI}" -pkeyopt digest:sha256 -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-sig.bin Signature Verified Successfully ## DigestSign and DigestVerify with RSA openssl pkeyutl -sign -inkey "${BASEURI}" -digest sha256 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha256-dgstsig.bin openssl pkeyutl -verify -inkey "${BASEURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully openssl pkeyutl -verify -inkey "${PUBURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully RSA basic encrypt and decrypt openssl pkeyutl -encrypt -inkey "${PUBURI}" -pubin -in ${SECRETFILE} -out ${SECRETFILE}.enc openssl pkeyutl -decrypt -inkey "${PRIURI}" -in ${SECRETFILE}.enc -out ${SECRETFILE}.dec ## Test Disallow Public Export openssl pkey -in $PUBURI -pubin -pubout -text ## Test CSR generation from RSA private keys openssl req -new -batch -key "${PRIURI}" -out ${TMPPDIR}/rsa_csr.pem openssl req -in ${TMPPDIR}/rsa_csr.pem -verify -noout Certificate request self-signature verify OK ## Test fetching public keys without PIN in config files openssl pkey -in $PUBURI -pubin -pubout -out ${TMPPDIR}/rsa.pub.nopin.pem openssl pkey -in $ECPUBURI -pubin -pubout -out ${TMPPDIR}/ec.pub.nopin.pem ## Test fetching public keys with a PIN in URI openssl pkey -in $BASEURIWITHPIN -pubin -pubout -out ${TMPPDIR}/rsa.pub.uripin.pem openssl pkey -in $ECBASEURIWITHPIN -pubin -pubout -out ${TMPPDIR}/ec.pub.uripin.pem ## Test prompting without PIN in config files Failed to get expected command output Original command output: Enter pass phrase for PKCS#11 Token (Slot 1 - NSS Internal Cryptographic Services): PKCS11 RSA Private Key (2048 bits) [Can't export and print private key data] URI pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%9A%2F%84%32%F6%ED%E0%EF%BF%A9%1E%1B%1B%D8%DF%23%33%60%40%C9;type=private FAIL basic-softokn.t (exit status: 1) FAIL: basic-softhsm =================== Executing ./tbasic ## Raw Sign check error openssl pkeyutl -sign -inkey "${BASEURI}" -pkeyopt pad-mode:none -in ${TMPPDIR}/64Brandom.bin -out ${TMPPDIR}/raw-sig.bin Public Key operation error 2034ADB0FFFFFF00:error:0200007A:rsa routines:p11prov_sig_operate:data too small for key size:signature.c:874: ## Sign and Verify with provided Hash and RSA openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${PRIURI}" -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-sig.bin openssl pkeyutl -verify -inkey "${PUBURI}" -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-sig.bin Signature Verified Successfully ## Sign and Verify with provided Hash and RSA with DigestInfo struct openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${PRIURI}" -pkeyopt digest:sha256 -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-sig.bin openssl pkeyutl -verify -inkey "${PUBURI}" -pkeyopt digest:sha256 -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-sig.bin Signature Verified Successfully ## DigestSign and DigestVerify with RSA openssl pkeyutl -sign -inkey "${BASEURI}" -digest sha256 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha256-dgstsig.bin openssl pkeyutl -verify -inkey "${BASEURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully openssl pkeyutl -verify -inkey "${PUBURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully RSA basic encrypt and decrypt openssl pkeyutl -encrypt -inkey "${PUBURI}" -pubin -in ${SECRETFILE} -out ${SECRETFILE}.enc openssl pkeyutl -decrypt -inkey "${PRIURI}" -in ${SECRETFILE}.enc -out ${SECRETFILE}.dec ## Test Disallow Public Export openssl pkey -in $PUBURI -pubin -pubout -text ## Test CSR generation from RSA private keys openssl req -new -batch -key "${PRIURI}" -out ${TMPPDIR}/rsa_csr.pem openssl req -in ${TMPPDIR}/rsa_csr.pem -verify -noout Certificate request self-signature verify OK ## Test fetching public keys without PIN in config files openssl pkey -in $PUBURI -pubin -pubout -out ${TMPPDIR}/rsa.pub.nopin.pem openssl pkey -in $ECPUBURI -pubin -pubout -out ${TMPPDIR}/ec.pub.nopin.pem ## Test fetching public keys with a PIN in URI openssl pkey -in $BASEURIWITHPIN -pubin -pubout -out ${TMPPDIR}/rsa.pub.uripin.pem openssl pkey -in $ECBASEURIWITHPIN -pubin -pubout -out ${TMPPDIR}/ec.pub.uripin.pem ## Test prompting without PIN in config files Failed to get expected command output Original command output: Enter pass phrase for PKCS#11 Token (Slot 535649871 - SoftHSM slot ID 0x1fed5e4f): PKCS11 RSA Private Key (2048 bits) [Can't export and print private key data] URI pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=3797858b1fed5e4f;token=token_name;id=%00%01;object=testCert;type=private FAIL basic-softhsm.t (exit status: 1) FAIL: tls-softokn ================= Executing ./ttls ## Test SSL_CTX creation SSL Context works! ## Test an actual TLS connection 20540792FFFFFF00:error:8000006F:system library:BIO_connect:Connection refused:crypto/bio/bio_sock2.c:114:calling connect() 20540792FFFFFF00:error:10000067:BIO routines:BIO_connect:connect error:crypto/bio/bio_sock2.c:116: 20540792FFFFFF00:error:8000006F:system library:BIO_connect:Connection refused:crypto/bio/bio_sock2.c:114:calling connect() 20540792FFFFFF00:error:10000067:BIO routines:BIO_connect:connect error:crypto/bio/bio_sock2.c:116: connect:errno=111 Check message was successfully delivered over TLS kill: sending signal to 649246 failed: No such process /builddir/build/BUILD/pkcs11-provider-0.2/tests/helpers.sh: line 66: 649244 Killed $CHECKER openssl s_server -accept "${PORT}" -key "${PRIURI}" -cert "${CRTURI}" 0<&3 Server output: FAIL tls-softokn.t (exit status: 1) FAIL: tls-softhsm ================= Executing ./ttls ## Test SSL_CTX creation SSL Context works! ## Test an actual TLS connection 20648A97FFFFFF00:error:8000006F:system library:BIO_connect:Connection refused:crypto/bio/bio_sock2.c:114:calling connect() 20648A97FFFFFF00:error:10000067:BIO routines:BIO_connect:connect error:crypto/bio/bio_sock2.c:116: 20648A97FFFFFF00:error:8000006F:system library:BIO_connect:Connection refused:crypto/bio/bio_sock2.c:114:calling connect() 20648A97FFFFFF00:error:10000067:BIO routines:BIO_connect:connect error:crypto/bio/bio_sock2.c:116: connect:errno=111 Check message was successfully delivered over TLS kill: sending signal to 649272 failed: No such process /builddir/build/BUILD/pkcs11-provider-0.2/tests/helpers.sh: line 66: 649270 Killed $CHECKER openssl s_server -accept "${PORT}" -key "${PRIURI}" -cert "${CRTURI}" 0<&3 Server output: FAIL tls-softhsm.t (exit status: 1) Executing ./ttls ## Test SSL_CTX creation SSL Context works! ## Test an actual TLS connection 20648A97FFFFFF00:error:8000006F:system library:BIO_connect:Connection refused:crypto/bio/bio_sock2.c:114:calling connect() 20648A97FFFFFF00:error:10000067:BIO routines:BIO_connect:connect error:crypto/bio/bio_sock2.c:116: 20648A97FFFFFF00:error:8000006F:system library:BIO_connect:Connection refused:crypto/bio/bio_sock2.c:114:calling connect() 20648A97FFFFFF00:error:10000067:BIO routines:BIO_connect:connect error:crypto/bio/bio_sock2.c:116: connect:errno=111 Check message was successfully delivered over TLS kill: sending signal to 649272 failed: No such process /builddir/build/BUILD/pkcs11-provider-0.2/tests/helpers.sh: line 66: 649270 Killed $CHECKER openssl s_server -accept "${PORT}" -key "${PRIURI}" -cert "${CRTURI}" 0<&3 Server output: FAIL tls-softhsm.t (exit status: 1) Executing ./ttls ## Test SSL_CTX creation SSL Context works! ## Test an actual TLS connection 20540792FFFFFF00:error:8000006F:system library:BIO_connect:Connection refused:crypto/bio/bio_sock2.c:114:calling connect() 20540792FFFFFF00:error:10000067:BIO routines:BIO_connect:connect error:crypto/bio/bio_sock2.c:116: 20540792FFFFFF00:error:8000006F:system library:BIO_connect:Connection refused:crypto/bio/bio_sock2.c:114:calling connect() 20540792FFFFFF00:error:10000067:BIO routines:BIO_connect:connect error:crypto/bio/bio_sock2.c:116: connect:errno=111 Check message was successfully delivered over TLS kill: sending signal to 649246 failed: No such process /builddir/build/BUILD/pkcs11-provider-0.2/tests/helpers.sh: line 66: 649244 Killed $CHECKER openssl s_server -accept "${PORT}" -key "${PRIURI}" -cert "${CRTURI}" 0<&3 Server output: FAIL tls-softokn.t (exit status: 1) Executing ./turi ## Check that storeutl returns URIs openssl storeutl -text pkcs11: ## Check returned URIs work to find objects $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=3797858b1fed5e4f;token=token_name;id=%00%02;object=ecCert;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=3797858b1fed5e4f;token=token_name;id=%71%CA%E7%7E%80%B1%4F%9A%49%0E%B1%24%CD%BC%C4%2A;object=Test%20RSA-PSS%20gen%20[%2571%25ca%25e7];type=private openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=3797858b1fed5e4f;token=token_name;id=%00%01;object=testCert;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=3797858b1fed5e4f;token=token_name;id=%93%4D%E4%7A%8B%CB%E1%28%98%7E%6A%91%93%DD%7A%C6;object=934de47a;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=3797858b1fed5e4f;token=token_name;id=%F1%77%DB%19%80%26%4F%23%A4%8C%37%31%53%80%14%1F;object=Test%20EC%20gen%20[%25f1%2577%25db];type=private openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=3797858b1fed5e4f;token=token_name;id=%71%CA%E7%7E%80%B1%4F%9A%49%0E%B1%24%CD%BC%C4%2A;object=Test%20RSA-PSS%20gen%20[%2571%25ca%25e7];type=public openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=3797858b1fed5e4f;token=token_name;id=%00%06;object=ecCert2;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=3797858b1fed5e4f;token=token_name;id=%F1%77%DB%19%80%26%4F%23%A4%8C%37%31%53%80%14%1F;object=Test%20EC%20gen%20[%25f1%2577%25db];type=public openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=3797858b1fed5e4f;token=token_name;id=%00%01;object=testCert;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=3797858b1fed5e4f;token=token_name;id=%22%65%75%DE%33%88%F0%35%C7%2F%CC%D5%5E%1D%94%C0;object=Test%20RSA%20gen%20[%2522%2565%2575];type=private openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=3797858b1fed5e4f;token=token_name;id=%00%00;object=caCert;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=3797858b1fed5e4f;token=token_name;id=%00%03;object=ecPeerCert;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=3797858b1fed5e4f;token=token_name;id=%00%03;object=ecPeerCert;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=3797858b1fed5e4f;token=token_name;id=%22%65%75%DE%33%88%F0%35%C7%2F%CC%D5%5E%1D%94%C0;object=Test%20RSA%20gen%20[%2522%2565%2575];type=public openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=3797858b1fed5e4f;token=token_name;id=%00%00;object=caCert;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=3797858b1fed5e4f;token=token_name;id=%93%4D%E4%7A%8B%CB%E1%28%98%7E%6A%91%93%DD%7A%C6;object=934de47a;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=3797858b1fed5e4f;token=token_name;id=%00%02;object=ecCert;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=3797858b1fed5e4f;token=token_name;id=%00%05;object=testCert2;type=private openssl storeutl -text "$uri" ## Check each URI component is tested $cmp=pkcs11:model=SoftHSM%20v2 openssl storeutl -text "pkcs11:${cmp}" $cmp=manufacturer=SoftHSM%20project openssl storeutl -text "pkcs11:${cmp}" $cmp=serial=3797858b1fed5e4f openssl storeutl -text "pkcs11:${cmp}" $cmp=token=token_name openssl storeutl -text "pkcs11:${cmp}" $cmp=id=%00%02 openssl storeutl -text "pkcs11:${cmp}" $cmp=object=ecCert openssl storeutl -text "pkcs11:${cmp}" $cmp=type=public openssl storeutl -text "pkcs11:${cmp}" PASS uri-softhsm.t (exit status: 0) Executing ./turi ## Check that storeutl returns URIs openssl storeutl -text pkcs11: ## Check returned URIs work to find objects $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%79%29%0A%B5%29%AB%97%42%E7%E4%60%EC%AE%6F%AA%90;object=79290ab5;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%95%BB%77%20%AD%EE%86%E3%A6%2E%4F%58%90%9C%37%41;object=Test%20RSA%20gen%20[%2595%25bb%2577];type=public openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%1B%62%EE%6C%A8%D2%E0%2C%27%02%9D%72%02%B8%84%18;object=Test%20RSA-PSS%20gen%20[%251b%2562%25ee];type=public openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%13%FF%18%7E%DB%32%30%9C%93%6D%9E%16%DA%A3%96%FE;object=Test%20EC%20gen%20[%2513%25ff%2518];type=public openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%99%04%3D%80%A4%9B%83%07%87%ED%78%63%82%9A%02%40%DB%4A%7B%7E;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%9A%2F%84%32%F6%ED%E0%EF%BF%A9%1E%1B%1B%D8%DF%23%33%60%40%C9;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%CA%19%C3%02%9C%C3%9B%35%29%C0%4D%F5%27%93%4B%34%B7%1B%76%CB;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%55%B8%EC%13%4D%91%54%A9%75%74%78%B4%7E%48%B3%CF%8D%96%51%C1;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%79%29%0A%B5%29%AB%97%42%E7%E4%60%EC%AE%6F%AA%90;object=79290ab5;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%95%BB%77%20%AD%EE%86%E3%A6%2E%4F%58%90%9C%37%41;object=Test%20RSA%20gen%20[%2595%25bb%2577];type=private openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%1B%62%EE%6C%A8%D2%E0%2C%27%02%9D%72%02%B8%84%18;object=Test%20RSA-PSS%20gen%20[%251b%2562%25ee];type=private openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%13%FF%18%7E%DB%32%30%9C%93%6D%9E%16%DA%A3%96%FE;object=Test%20EC%20gen%20[%2513%25ff%2518];type=private openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%99%04%3D%80%A4%9B%83%07%87%ED%78%63%82%9A%02%40%DB%4A%7B%7E;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%9A%2F%84%32%F6%ED%E0%EF%BF%A9%1E%1B%1B%D8%DF%23%33%60%40%C9;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%CA%19%C3%02%9C%C3%9B%35%29%C0%4D%F5%27%93%4B%34%B7%1B%76%CB;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%55%B8%EC%13%4D%91%54%A9%75%74%78%B4%7E%48%B3%CF%8D%96%51%C1;type=private openssl storeutl -text "$uri" ## Check each URI component is tested $cmp=pkcs11:model=NSS%203 openssl storeutl -text "pkcs11:${cmp}" $cmp=manufacturer=Mozilla%20Foundation openssl storeutl -text "pkcs11:${cmp}" $cmp=serial=0000000000000000 openssl storeutl -text "pkcs11:${cmp}" $cmp=token=NSS%20Certificate%20DB openssl storeutl -text "pkcs11:${cmp}" $cmp=id=%79%29%0A%B5%29%AB%97%42%E7%E4%60%EC%AE%6F%AA%90 openssl storeutl -text "pkcs11:${cmp}" $cmp=object=79290ab5 openssl storeutl -text "pkcs11:${cmp}" $cmp=type=public openssl storeutl -text "pkcs11:${cmp}" PASS uri-softokn.t (exit status: 0) RPM build errors: + exit 1 error: Bad exit status from /var/tmp/rpm-tmp.vnkhVn (%check) Bad exit status from /var/tmp/rpm-tmp.vnkhVn (%check) Child return code was: 1 EXCEPTION: [Error('Command failed: \n # bash --login -c /usr/bin/rpmbuild -bb --noclean --target riscv64 --nodeps /builddir/build/SPECS/pkcs11-provider.spec\n', 1)] Traceback (most recent call last): File "/usr/lib/python3.11/site-packages/mockbuild/trace_decorator.py", line 93, in trace result = func(*args, **kw) ^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.11/site-packages/mockbuild/util.py", line 597, in do_with_status raise exception.Error("Command failed: \n # %s\n%s" % (command, output), child.returncode) mockbuild.exception.Error: Command failed: # bash --login -c /usr/bin/rpmbuild -bb --noclean --target riscv64 --nodeps /builddir/build/SPECS/pkcs11-provider.spec