Mock Version: 5.0 Mock Version: 5.0 Mock Version: 5.0 ENTER ['do_with_status'](['bash', '--login', '-c', '/usr/bin/rpmbuild -bs --noclean --target riscv64 --nodeps /builddir/build/SPECS/pkcs11-provider.spec'], chrootPath='/var/lib/mock/f39-build-1933648-43116/root'env={'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;\\007"', 'PS1': ' \\s-\\v\\$ ', 'LANG': 'C.UTF-8'}shell=Falselogger=timeout=864000uid=996gid=135user='mockbuild'nspawn_args=[]unshare_net=TrueprintOutput=False) Executing command: ['bash', '--login', '-c', '/usr/bin/rpmbuild -bs --noclean --target riscv64 --nodeps /builddir/build/SPECS/pkcs11-provider.spec'] with env {'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;\\007"', 'PS1': ' \\s-\\v\\$ ', 'LANG': 'C.UTF-8'} and shell False Building target platforms: riscv64 Building for target riscv64 setting SOURCE_DATE_EPOCH=1689897600 Wrote: /builddir/build/SRPMS/pkcs11-provider-0.2-2.fc39.src.rpm Child return code was: 0 ENTER ['do_with_status'](['bash', '--login', '-c', '/usr/bin/rpmbuild -bb --noclean --target riscv64 --nodeps /builddir/build/SPECS/pkcs11-provider.spec'], chrootPath='/var/lib/mock/f39-build-1933648-43116/root'env={'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;\\007"', 'PS1': ' \\s-\\v\\$ ', 'LANG': 'C.UTF-8'}shell=Falselogger=timeout=864000uid=996gid=135user='mockbuild'nspawn_args=[]unshare_net=TrueprintOutput=False) Executing command: ['bash', '--login', '-c', '/usr/bin/rpmbuild -bb --noclean --target riscv64 --nodeps /builddir/build/SPECS/pkcs11-provider.spec'] with env {'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;\\007"', 'PS1': ' \\s-\\v\\$ ', 'LANG': 'C.UTF-8'} and shell False Building target platforms: riscv64 Building for target riscv64 setting SOURCE_DATE_EPOCH=1689897600 Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.VLbV13 + umask 022 + cd /builddir/build/BUILD + cd /builddir/build/BUILD + rm -rf pkcs11-provider-0.2 + /usr/lib/rpm/rpmuncompress -x /builddir/build/SOURCES/pkcs11-provider-0.2.tar.xz + STATUS=0 + '[' 0 -ne 0 ']' + cd pkcs11-provider-0.2 + rm -rf /builddir/build/BUILD/pkcs11-provider-0.2-SPECPARTS + /usr/bin/mkdir -p /builddir/build/BUILD/pkcs11-provider-0.2-SPECPARTS + /usr/bin/chmod -Rf a+rX,u+w,g-w,o-w . + RPM_EC=0 ++ jobs -p + exit 0 Executing(%build): /bin/sh -e /var/tmp/rpm-tmp.EbdF5v + umask 022 + cd /builddir/build/BUILD + CFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer ' + export CFLAGS + CXXFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer ' + export CXXFLAGS + FFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -I/usr/lib64/gfortran/modules ' + export FFLAGS + FCFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -I/usr/lib64/gfortran/modules ' + export FCFLAGS + VALAFLAGS=-g + export VALAFLAGS + RUSTFLAGS='-Copt-level=3 -Cdebuginfo=2 -Ccodegen-units=1 -Cstrip=none -Cforce-frame-pointers=yes -Clink-arg=-Wl,-z,relro -Clink-arg=-Wl,-z,now -Clink-arg=-specs=/usr/lib/rpm/redhat/redhat-package-notes --cap-lints=warn' + export RUSTFLAGS + LDFLAGS='-Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes ' + export LDFLAGS + LT_SYS_LIBRARY_PATH=/usr/lib64: + export LT_SYS_LIBRARY_PATH + CC=gcc + export CC + CXX=g++ + export CXX + cd pkcs11-provider-0.2 + autoreconf -fi libtoolize: putting auxiliary files in '.'. libtoolize: copying file './ltmain.sh' libtoolize: putting macros in AC_CONFIG_MACRO_DIRS, 'm4'. libtoolize: copying file 'm4/libtool.m4' libtoolize: copying file 'm4/ltoptions.m4' libtoolize: copying file 'm4/ltsugar.m4' libtoolize: copying file 'm4/ltversion.m4' libtoolize: copying file 'm4/lt~obsolete.m4' configure.ac:12: installing './compile' configure.ac:8: installing './missing' src/Makefile.am: installing './depcomp' + CFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer ' + export CFLAGS + CXXFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer ' + export CXXFLAGS + FFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -I/usr/lib64/gfortran/modules ' + export FFLAGS + FCFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -I/usr/lib64/gfortran/modules ' + export FCFLAGS + VALAFLAGS=-g + export VALAFLAGS + RUSTFLAGS='-Copt-level=3 -Cdebuginfo=2 -Ccodegen-units=1 -Cstrip=none -Cforce-frame-pointers=yes -Clink-arg=-Wl,-z,relro -Clink-arg=-Wl,-z,now -Clink-arg=-specs=/usr/lib/rpm/redhat/redhat-package-notes --cap-lints=warn' + export RUSTFLAGS + LDFLAGS='-Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes ' + export LDFLAGS + LT_SYS_LIBRARY_PATH=/usr/lib64: + export LT_SYS_LIBRARY_PATH + CC=gcc + export CC + CXX=g++ + export CXX + '[' '-flto=auto -ffat-lto-objectsx' '!=' x ']' ++ find . -type f -name configure -print + for file in $(find . -type f -name configure -print) + /usr/bin/sed -r --in-place=.backup 's/^char \(\*f\) \(\) = /__attribute__ ((used)) char (*f) () = /g' ./configure + diff -u ./configure.backup ./configure + mv ./configure.backup ./configure + /usr/bin/sed -r --in-place=.backup 's/^char \(\*f\) \(\);/__attribute__ ((used)) char (*f) ();/g' ./configure + diff -u ./configure.backup ./configure + mv ./configure.backup ./configure + /usr/bin/sed -r --in-place=.backup 's/^char \$2 \(\);/__attribute__ ((used)) char \$2 ();/g' ./configure + diff -u ./configure.backup ./configure --- ./configure.backup 2023-12-05 14:20:04.408019215 -0500 +++ ./configure 2023-12-05 14:20:39.688019667 -0500 @@ -1768,7 +1768,7 @@ #ifdef __cplusplus extern "C" #endif -char $2 (); +__attribute__ ((used)) char $2 (); /* The GNU C library defines this for functions which it implements to always fail with ENOSYS. Some functions are actually named something starting with __ and the normal name is an alias. */ + /usr/bin/sed --in-place=.backup '1{$!N;$!N};$!N;s/int x = 1;\nint y = 0;\nint z;\nint nan;/volatile int x = 1; volatile int y = 0; volatile int z, nan;/;P;D' ./configure + diff -u ./configure.backup ./configure + mv ./configure.backup ./configure + /usr/bin/sed --in-place=.backup 's#^lt_cv_sys_global_symbol_to_cdecl=.*#lt_cv_sys_global_symbol_to_cdecl="sed -n -e '\''s/^T .* \\(.*\\)$/extern int \\1();/p'\'' -e '\''s/^$symcode* .* \\(.*\\)$/extern char \\1;/p'\''"#' ./configure + diff -u ./configure.backup ./configure --- ./configure.backup 2023-12-05 14:20:39.688019667 -0500 +++ ./configure 2023-12-05 14:20:40.688019680 -0500 @@ -7051,7 +7051,7 @@ # Transform an extracted symbol line into a proper C declaration. # Some systems (esp. on ia64) link data and code symbols differently, # so use this general approach. -lt_cv_sys_global_symbol_to_cdecl="$SED -n"\ +lt_cv_sys_global_symbol_to_cdecl="sed -n -e 's/^T .* \(.*\)$/extern int \1();/p' -e 's/^$symcode* .* \(.*\)$/extern char \1;/p'" $lt_cdecl_hook\ " -e 's/^T .* \(.*\)$/extern int \1();/p'"\ " -e 's/^$symcode$symcode* .* \(.*\)$/extern char \1;/p'" @@ -15312,7 +15312,7 @@ compiler='`$ECHO "$compiler" | $SED "$delay_single_quote_subst"`' GCC='`$ECHO "$GCC" | $SED "$delay_single_quote_subst"`' lt_cv_sys_global_symbol_pipe='`$ECHO "$lt_cv_sys_global_symbol_pipe" | $SED "$delay_single_quote_subst"`' -lt_cv_sys_global_symbol_to_cdecl='`$ECHO "$lt_cv_sys_global_symbol_to_cdecl" | $SED "$delay_single_quote_subst"`' +lt_cv_sys_global_symbol_to_cdecl="sed -n -e 's/^T .* \(.*\)$/extern int \1();/p' -e 's/^$symcode* .* \(.*\)$/extern char \1;/p'" lt_cv_sys_global_symbol_to_import='`$ECHO "$lt_cv_sys_global_symbol_to_import" | $SED "$delay_single_quote_subst"`' lt_cv_sys_global_symbol_to_c_name_address='`$ECHO "$lt_cv_sys_global_symbol_to_c_name_address" | $SED "$delay_single_quote_subst"`' lt_cv_sys_global_symbol_to_c_name_address_lib_prefix='`$ECHO "$lt_cv_sys_global_symbol_to_c_name_address_lib_prefix" | $SED "$delay_single_quote_subst"`' + '[' 1 = 1 ']' +++ dirname ./configure ++ find . -name config.guess -o -name config.sub + for i in $(find $(dirname ./configure) -name config.guess -o -name config.sub) ++ basename ./config.sub + '[' -f /usr/lib/rpm/redhat/config.sub ']' + /usr/bin/rm -f ./config.sub ++ basename ./config.sub + /usr/bin/cp -fv /usr/lib/rpm/redhat/config.sub ./config.sub '/usr/lib/rpm/redhat/config.sub' -> './config.sub' + for i in $(find $(dirname ./configure) -name config.guess -o -name config.sub) ++ basename ./config.guess + '[' -f /usr/lib/rpm/redhat/config.guess ']' + /usr/bin/rm -f ./config.guess ++ basename ./config.guess + /usr/bin/cp -fv /usr/lib/rpm/redhat/config.guess ./config.guess '/usr/lib/rpm/redhat/config.guess' -> './config.guess' + '[' 1 = 1 ']' + '[' x '!=' 'x-Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld' ']' ++ find . -name ltmain.sh + for i in $(find . -name ltmain.sh) + /usr/bin/sed -i.backup -e 's~compiler_flags=$~compiler_flags="-Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld"~' ./ltmain.sh ++ grep -q runstatedir=DIR ./configure ++ echo --runstatedir=/run + ./configure --build=riscv64-koji-linux-gnu --host=riscv64-koji-linux-gnu --program-prefix= --disable-dependency-tracking --prefix=/usr --exec-prefix=/usr --bindir=/usr/bin --sbindir=/usr/sbin --sysconfdir=/etc --datadir=/usr/share --includedir=/usr/include --libdir=/usr/lib64 --libexecdir=/usr/libexec --localstatedir=/var --runstatedir=/run --sharedstatedir=/var/lib --mandir=/usr/share/man --infodir=/usr/share/info checking for a BSD-compatible install... /usr/bin/install -c checking whether build environment is sane... yes checking for a race-free mkdir -p... /usr/bin/mkdir -p checking for gawk... gawk checking whether make sets $(MAKE)... yes checking whether make supports nested variables... yes checking for riscv64-koji-linux-gnu-gcc... gcc checking whether the C compiler works... yes checking for C compiler default output file name... a.out checking for suffix of executables... checking whether we are cross compiling... no checking for suffix of object files... o checking whether the compiler supports GNU C... yes checking whether gcc accepts -g... yes checking for gcc option to enable C11 features... none needed checking whether gcc understands -c and -o together... yes checking whether make supports the include directive... yes (GNU style) checking dependency style of gcc... none checking for riscv64-koji-linux-gnu-ar... no checking for riscv64-koji-linux-gnu-lib... no checking for riscv64-koji-linux-gnu-link... no checking for ar... ar checking the archiver (ar) interface... ar checking build system type... riscv64-koji-linux-gnu checking host system type... riscv64-koji-linux-gnu checking how to print strings... printf checking for a sed that does not truncate output... /usr/bin/sed checking for grep that handles long lines and -e... /usr/bin/grep checking for egrep... /usr/bin/grep -E checking for fgrep... /usr/bin/grep -F checking for ld used by gcc... /usr/bin/ld checking if the linker (/usr/bin/ld) is GNU ld... yes checking for BSD- or MS-compatible name lister (nm)... /usr/bin/nm -B checking the name lister (/usr/bin/nm -B) interface... BSD nm checking whether ln -s works... yes checking the maximum length of command line arguments... 1572864 checking how to convert riscv64-koji-linux-gnu file names to riscv64-koji-linux-gnu format... func_convert_file_noop checking how to convert riscv64-koji-linux-gnu file names to toolchain format... func_convert_file_noop checking for /usr/bin/ld option to reload object files... -r checking for riscv64-koji-linux-gnu-file... no checking for file... file checking for riscv64-koji-linux-gnu-objdump... no checking for objdump... objdump checking how to recognize dependent libraries... pass_all checking for riscv64-koji-linux-gnu-dlltool... no checking for dlltool... no checking how to associate runtime and link libraries... printf %s\n checking for riscv64-koji-linux-gnu-ar... ar checking for archiver @FILE support... @ checking for riscv64-koji-linux-gnu-strip... no checking for strip... strip checking for riscv64-koji-linux-gnu-ranlib... no checking for ranlib... ranlib checking command to parse /usr/bin/nm -B output from gcc object... ./configure: line 7057: -e 's/^T .* \(.*\)$/extern int \1();/p' -e 's/^[ABCDGIRSTW][ABCDGIRSTW]* .* \(.*\)$/extern char \1;/p': No such file or directory ok checking for sysroot... no checking for a working dd... /usr/bin/dd checking how to truncate binary pipes... /usr/bin/dd bs=4096 count=1 checking for riscv64-koji-linux-gnu-mt... no checking for mt... no checking if : is a manifest tool... no checking for stdio.h... yes checking for stdlib.h... yes checking for string.h... yes checking for inttypes.h... yes checking for stdint.h... yes checking for strings.h... yes checking for sys/stat.h... yes checking for sys/types.h... yes checking for unistd.h... yes checking for dlfcn.h... yes checking for objdir... .libs checking if gcc supports -fno-rtti -fno-exceptions... no checking for gcc option to produce PIC... -fPIC -DPIC checking if gcc PIC flag -fPIC -DPIC works... yes checking if gcc static flag -static works... no checking if gcc supports -c -o file.o... yes checking if gcc supports -c -o file.o... (cached) yes checking whether the gcc linker (/usr/bin/ld) supports shared libraries... yes checking whether -lc should be explicitly linked in... no checking dynamic linker characteristics... GNU/Linux ld.so checking how to hardcode library paths into programs... immediate checking whether stripping libraries is possible... yes checking if libtool supports shared libraries... yes checking whether to build shared libraries... yes checking whether to build static libraries... yes checking for riscv64-koji-linux-gnu-pkg-config... no checking for pkg-config... /usr/bin/pkg-config checking pkg-config is at least version 0.9.0... yes checking whether C compiler accepts -std=c11... yes checking for valgrind... no checking whether C compiler accepts -fno-strict-aliasing... yes checking whether C compiler accepts -Werror -fno-delete-null-pointer-checks... yes checking whether C compiler accepts -fdiagnostics-show-option... yes checking for libcrypto >= 3.0.7... yes checking for libcrypto >= 3.0.7, libssl... yes checking for --with-address-sanitizer... no checking for /usr/lib64/libsoftokn3.so... yes checking for string.h... (cached) yes checking for dlfcn.h... (cached) yes checking for _Bool... yes checking for stdbool.h that conforms to C99... yes checking whether byte ordering is bigendian... no checking for inline... inline checking for size_t... yes checking for strpbrk... yes checking that generated files are newer than configure... done configure: creating ./config.status config.status: creating Makefile config.status: creating docs/Makefile config.status: creating src/Makefile config.status: creating tests/Makefile config.status: creating src/config.h config.status: executing depfiles commands config.status: executing libtool commands + /usr/bin/make -O -j8 V=1 VERBOSE=1 Making all in src /usr/bin/make all-am make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-debug.lo `test -f 'debug.c' || echo './'`debug.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c debug.c -fPIC -DPIC -o .libs/pkcs11_la-debug.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c debug.c -o pkcs11_la-debug.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-kdf.lo `test -f 'kdf.c' || echo './'`kdf.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c kdf.c -fPIC -DPIC -o .libs/pkcs11_la-kdf.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c kdf.c -o pkcs11_la-kdf.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-asymmetric_cipher.lo `test -f 'asymmetric_cipher.c' || echo './'`asymmetric_cipher.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c asymmetric_cipher.c -fPIC -DPIC -o .libs/pkcs11_la-asymmetric_cipher.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c asymmetric_cipher.c -o pkcs11_la-asymmetric_cipher.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-exchange.lo `test -f 'exchange.c' || echo './'`exchange.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c exchange.c -fPIC -DPIC -o .libs/pkcs11_la-exchange.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c exchange.c -o pkcs11_la-exchange.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-digests.lo `test -f 'digests.c' || echo './'`digests.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c digests.c -fPIC -DPIC -o .libs/pkcs11_la-digests.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c digests.c -o pkcs11_la-digests.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-encoder.lo `test -f 'encoder.c' || echo './'`encoder.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c encoder.c -fPIC -DPIC -o .libs/pkcs11_la-encoder.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c encoder.c -o pkcs11_la-encoder.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-keymgmt.lo `test -f 'keymgmt.c' || echo './'`keymgmt.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c keymgmt.c -fPIC -DPIC -o .libs/pkcs11_la-keymgmt.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c keymgmt.c -o pkcs11_la-keymgmt.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-random.lo `test -f 'random.c' || echo './'`random.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c random.c -fPIC -DPIC -o .libs/pkcs11_la-random.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c random.c -o pkcs11_la-random.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-interface.lo `test -f 'interface.c' || echo './'`interface.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c interface.c -fPIC -DPIC -o .libs/pkcs11_la-interface.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c interface.c -o pkcs11_la-interface.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-tls.lo `test -f 'tls.c' || echo './'`tls.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c tls.c -fPIC -DPIC -o .libs/pkcs11_la-tls.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c tls.c -o pkcs11_la-tls.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-slot.lo `test -f 'slot.c' || echo './'`slot.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c slot.c -fPIC -DPIC -o .libs/pkcs11_la-slot.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c slot.c -o pkcs11_la-slot.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-session.lo `test -f 'session.c' || echo './'`session.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c session.c -fPIC -DPIC -o .libs/pkcs11_la-session.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c session.c -o pkcs11_la-session.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-store.lo `test -f 'store.c' || echo './'`store.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c store.c -fPIC -DPIC -o .libs/pkcs11_la-store.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c store.c -o pkcs11_la-store.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-objects.lo `test -f 'objects.c' || echo './'`objects.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c objects.c -fPIC -DPIC -o .libs/pkcs11_la-objects.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c objects.c -o pkcs11_la-objects.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-provider.lo `test -f 'provider.c' || echo './'`provider.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c provider.c -fPIC -DPIC -o .libs/pkcs11_la-provider.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c provider.c -o pkcs11_la-provider.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-signature.lo `test -f 'signature.c' || echo './'`signature.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c signature.c -fPIC -DPIC -o .libs/pkcs11_la-signature.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c signature.c -o pkcs11_la-signature.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-util.lo `test -f 'util.c' || echo './'`util.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c util.c -fPIC -DPIC -o .libs/pkcs11_la-util.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c util.c -o pkcs11_la-util.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=link gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -module -shared -shrext .so -avoid-version -export-symbols "./provider.exports" -Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o pkcs11.la -rpath /usr/lib64/ossl-modules pkcs11_la-asymmetric_cipher.lo pkcs11_la-debug.lo pkcs11_la-encoder.lo pkcs11_la-digests.lo pkcs11_la-exchange.lo pkcs11_la-kdf.lo pkcs11_la-keymgmt.lo pkcs11_la-interface.lo pkcs11_la-objects.lo pkcs11_la-provider.lo pkcs11_la-random.lo pkcs11_la-session.lo pkcs11_la-signature.lo pkcs11_la-slot.lo pkcs11_la-store.lo pkcs11_la-tls.lo pkcs11_la-util.lo -lcrypto libtool: link: echo "{ global:" > .libs/pkcs11.ver libtool: link: cat ./provider.exports | /usr/bin/sed -e "s/\(.*\)/\1;/" >> .libs/pkcs11.ver libtool: link: echo "local: *; };" >> .libs/pkcs11.ver libtool: link: gcc -shared -fPIC -DPIC .libs/pkcs11_la-asymmetric_cipher.o .libs/pkcs11_la-debug.o .libs/pkcs11_la-encoder.o .libs/pkcs11_la-digests.o .libs/pkcs11_la-exchange.o .libs/pkcs11_la-kdf.o .libs/pkcs11_la-keymgmt.o .libs/pkcs11_la-interface.o .libs/pkcs11_la-objects.o .libs/pkcs11_la-provider.o .libs/pkcs11_la-random.o .libs/pkcs11_la-session.o .libs/pkcs11_la-signature.o .libs/pkcs11_la-slot.o .libs/pkcs11_la-store.o .libs/pkcs11_la-tls.o .libs/pkcs11_la-util.o -lcrypto -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -O2 -flto=auto -g -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -Wl,-soname -Wl,pkcs11.so -Wl,-version-script -Wl,.libs/pkcs11.ver -o .libs/pkcs11.so libtool: link: ( cd ".libs" && rm -f "pkcs11.la" && ln -s "../pkcs11.la" "pkcs11.la" ) make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' Making all in tests make[1]: Nothing to be done for 'all'. Making all in docs make[1]: Nothing to be done for 'all'. make[1]: Nothing to be done for 'all-am'. + RPM_EC=0 ++ jobs -p + exit 0 Executing(%install): /bin/sh -e /var/tmp/rpm-tmp.8R8TSj + umask 022 + cd /builddir/build/BUILD + '[' /builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64 '!=' / ']' + rm -rf /builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64 ++ dirname /builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64 + mkdir -p /builddir/build/BUILDROOT + mkdir /builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64 + CFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer ' + export CFLAGS + CXXFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer ' + export CXXFLAGS + FFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -I/usr/lib64/gfortran/modules ' + export FFLAGS + FCFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -I/usr/lib64/gfortran/modules ' + export FCFLAGS + VALAFLAGS=-g + export VALAFLAGS + RUSTFLAGS='-Copt-level=3 -Cdebuginfo=2 -Ccodegen-units=1 -Cstrip=none -Cforce-frame-pointers=yes -Clink-arg=-Wl,-z,relro -Clink-arg=-Wl,-z,now -Clink-arg=-specs=/usr/lib/rpm/redhat/redhat-package-notes --cap-lints=warn' + export RUSTFLAGS + LDFLAGS='-Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes ' + export LDFLAGS + LT_SYS_LIBRARY_PATH=/usr/lib64: + export LT_SYS_LIBRARY_PATH + CC=gcc + export CC + CXX=g++ + export CXX + cd pkcs11-provider-0.2 + /usr/bin/make install DESTDIR=/builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64 'INSTALL=/usr/bin/install -p' Making install in src make[1]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Nothing to be done for 'install-exec-am'. /usr/bin/mkdir -p '/builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64/usr/lib64/ossl-modules' /bin/sh ../libtool --mode=install /usr/bin/install -p pkcs11.la '/builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64/usr/lib64/ossl-modules' libtool: install: /usr/bin/install -p .libs/pkcs11.so /builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64/usr/lib64/ossl-modules/pkcs11.so libtool: install: /usr/bin/install -p .libs/pkcs11.lai /builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64/usr/lib64/ossl-modules/pkcs11.la libtool: warning: remember to run 'libtool --finish /usr/lib64/ossl-modules' make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[1]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' Making install in tests make[1]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' make[2]: Nothing to be done for 'install-data-am'. make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' make[1]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' Making install in docs make[1]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/docs' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/docs' make[2]: Nothing to be done for 'install-exec-am'. /usr/bin/mkdir -p '/builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64/usr/share/man/man7' /usr/bin/install -p -m 644 provider-pkcs11.7 '/builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64/usr/share/man/man7' make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/docs' make[1]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/docs' make[1]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2' make[2]: Nothing to be done for 'install-exec-am'. /usr/bin/mkdir -p '/builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64/usr/share/doc/pkcs11-provider' /usr/bin/install -p -m 644 README.md '/builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64/usr/share/doc/pkcs11-provider' make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2' make[1]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2' + /usr/bin/find-debuginfo -j8 --strict-build-id -m -i --build-id-seed 0.2-2.fc39 --unique-debug-suffix -0.2-2.fc39.riscv64 --unique-debug-src-base pkcs11-provider-0.2-2.fc39.riscv64 --run-dwz --dwz-low-mem-die-limit 10000000 --dwz-max-die-limit 50000000 -S debugsourcefiles.list /builddir/build/BUILD/pkcs11-provider-0.2 find-debuginfo: starting Extracting debug info from 1 files DWARF-compressing 1 files sepdebugcrcfix: Updated 1 CRC32s, 0 CRC32s did match. Creating .debug symlinks for symlinks to ELF files Copying sources found by 'debugedit -l' to /usr/src/debug/pkcs11-provider-0.2-2.fc39.riscv64 1273 blocks find-debuginfo: done + /usr/lib/rpm/check-buildroot + /usr/lib/rpm/redhat/brp-ldconfig + /usr/lib/rpm/brp-compress + /usr/lib/rpm/redhat/brp-strip-lto /usr/bin/strip + /usr/lib/rpm/brp-strip-static-archive /usr/bin/strip + /usr/lib/rpm/check-rpaths + /usr/lib/rpm/redhat/brp-mangle-shebangs *** WARNING: ./usr/lib64/ossl-modules/pkcs11.la is executable but has no shebang, removing executable bit + /usr/lib/rpm/brp-remove-la-files + env /usr/lib/rpm/redhat/brp-python-bytecompile '' 1 0 -j8 + /usr/lib/rpm/redhat/brp-python-hardlink Executing(%check): /bin/sh -e /var/tmp/rpm-tmp.HIbZgg + umask 022 + cd /builddir/build/BUILD + CFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer ' + export CFLAGS + CXXFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer ' + export CXXFLAGS + FFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -I/usr/lib64/gfortran/modules ' + export FFLAGS + FCFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -I/usr/lib64/gfortran/modules ' + export FCFLAGS + VALAFLAGS=-g + export VALAFLAGS + RUSTFLAGS='-Copt-level=3 -Cdebuginfo=2 -Ccodegen-units=1 -Cstrip=none -Cforce-frame-pointers=yes -Clink-arg=-Wl,-z,relro -Clink-arg=-Wl,-z,now -Clink-arg=-specs=/usr/lib/rpm/redhat/redhat-package-notes --cap-lints=warn' + export RUSTFLAGS + LDFLAGS='-Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes ' + export LDFLAGS + LT_SYS_LIBRARY_PATH=/usr/lib64: + export LT_SYS_LIBRARY_PATH + CC=gcc + export CC + CXX=g++ + export CXX + cd pkcs11-provider-0.2 + make check Making check in src make[1]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[1]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' Making check in tests make[1]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' make tsession tgenkey tlsctx tdigests treadkeys tfork pincache \ helpers.sh setup-softhsm.sh setup-softokn.sh softhsm-proxy.sh test-wrapper tbasic tcerts tecc tecdh tedwards tdemoca thkdf toaepsha2 trsapss tdigest ttls tpubkey tfork turi trand make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' gcc -DHAVE_CONFIG_H -I. -I../src -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o tsession-tsession.o `test -f 'tsession.c' || echo './'`tsession.c /bin/sh ../libtool --tag=CC --mode=link gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tsession tsession-tsession.o -lssl -lcrypto libtool: link: gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tsession tsession-tsession.o -lssl -lcrypto gcc -DHAVE_CONFIG_H -I. -I../src -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o tgenkey-tgenkey.o `test -f 'tgenkey.c' || echo './'`tgenkey.c /bin/sh ../libtool --tag=CC --mode=link gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tgenkey tgenkey-tgenkey.o -lssl -lcrypto libtool: link: gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tgenkey tgenkey-tgenkey.o -lssl -lcrypto gcc -DHAVE_CONFIG_H -I. -I../src -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o tlsctx-tlsctx.o `test -f 'tlsctx.c' || echo './'`tlsctx.c /bin/sh ../libtool --tag=CC --mode=link gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tlsctx tlsctx-tlsctx.o -lssl -lcrypto libtool: link: gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tlsctx tlsctx-tlsctx.o -lssl -lcrypto gcc -DHAVE_CONFIG_H -I. -I../src -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o tdigests-tdigests.o `test -f 'tdigests.c' || echo './'`tdigests.c /bin/sh ../libtool --tag=CC --mode=link gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tdigests tdigests-tdigests.o -lssl -lcrypto libtool: link: gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tdigests tdigests-tdigests.o -lssl -lcrypto gcc -DHAVE_CONFIG_H -I. -I../src -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o treadkeys-treadkeys.o `test -f 'treadkeys.c' || echo './'`treadkeys.c /bin/sh ../libtool --tag=CC --mode=link gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o treadkeys treadkeys-treadkeys.o -lssl -lcrypto libtool: link: gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o treadkeys treadkeys-treadkeys.o -lssl -lcrypto gcc -DHAVE_CONFIG_H -I. -I../src -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o tfork-tfork.o `test -f 'tfork.c' || echo './'`tfork.c /bin/sh ../libtool --tag=CC --mode=link gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tfork tfork-tfork.o -lssl -lcrypto libtool: link: gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tfork tfork-tfork.o -lssl -lcrypto gcc -DHAVE_CONFIG_H -I. -I../src -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pincache-pincache.o `test -f 'pincache.c' || echo './'`pincache.c /bin/sh ../libtool --tag=CC --mode=link gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o pincache pincache-pincache.o -lssl -lcrypto libtool: link: gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o pincache pincache-pincache.o -lssl -lcrypto make[2]: Nothing to be done for 'helpers.sh'. make[2]: Nothing to be done for 'setup-softhsm.sh'. make[2]: Nothing to be done for 'setup-softokn.sh'. make[2]: Nothing to be done for 'softhsm-proxy.sh'. make[2]: Nothing to be done for 'test-wrapper'. make[2]: Nothing to be done for 'tbasic'. make[2]: Nothing to be done for 'tcerts'. make[2]: Nothing to be done for 'tecc'. make[2]: Nothing to be done for 'tecdh'. make[2]: Nothing to be done for 'tedwards'. make[2]: Nothing to be done for 'tdemoca'. make[2]: Nothing to be done for 'thkdf'. make[2]: Nothing to be done for 'toaepsha2'. make[2]: Nothing to be done for 'trsapss'. make[2]: Nothing to be done for 'tdigest'. make[2]: Nothing to be done for 'ttls'. make[2]: Nothing to be done for 'tpubkey'. make[2]: 'tfork' is up to date. make[2]: Nothing to be done for 'turi'. make[2]: Nothing to be done for 'trand'. make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' make check-TESTS make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' make[3]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' LIBSPATH=/builddir/build/BUILD/pkcs11-provider-0.2/src/.libs \ TESTSSRCDIR=/builddir/build/BUILD/pkcs11-provider-0.2/tests \ TESTBLDDIR=/builddir/build/BUILD/pkcs11-provider-0.2/tests \ SHARED_EXT=.so \ SOFTOKNPATH="/usr/lib64/" \ /builddir/build/BUILD/pkcs11-provider-0.2/tests/setup-softokn.sh > setup-softokn.log 2>&1 LIBSPATH=/builddir/build/BUILD/pkcs11-provider-0.2/src/.libs \ TESTSSRCDIR=/builddir/build/BUILD/pkcs11-provider-0.2/tests \ TESTBLDDIR=/builddir/build/BUILD/pkcs11-provider-0.2/tests \ SHARED_EXT=.so \ P11KITCLIENTPATH="/usr/lib64/pkcs11/p11-kit-client.so" \ /builddir/build/BUILD/pkcs11-provider-0.2/tests/setup-softhsm.sh > setup-softhsm.log 2>&1 FAIL: basic-softokn.t FAIL: basic-softhsm.t PASS: pubkey-softokn.t PASS: pubkey-softhsm.t PASS: certs-softokn.t PASS: certs-softhsm.t PASS: ecc-softokn.t PASS: ecc-softhsm.t PASS: edwards-softhsm.t PASS: ecdh-softokn.t PASS: democa-softokn.t PASS: democa-softhsm.t PASS: digest-softokn.t PASS: digest-softhsm.t PASS: fork-softokn.t PASS: fork-softhsm.t PASS: oaepsha2-softokn.t PASS: hkdf-softokn.t PASS: rsapss-softokn.t PASS: genkey-softokn.t PASS: genkey-softhsm.t PASS: session-softokn.t PASS: session-softhsm.t PASS: rand-softokn.t PASS: rand-softhsm.t PASS: readkeys-softokn.t PASS: readkeys-softhsm.t FAIL: tls-softokn.t FAIL: tls-softhsm.t PASS: uri-softokn.t PASS: uri-softhsm.t ============================================================================ Testsuite summary for pkcs11-provider 0.2 ============================================================================ # TOTAL: 31 # PASS: 27 # SKIP: 0 # XFAIL: 0 # FAIL: 4 # XPASS: 0 # ERROR: 0 ============================================================================ See tests/test-suite.log Please report to simo@redhat.com ============================================================================ make[3]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' make[3]: *** [Makefile:1004: test-suite.log] Error 1 make[2]: *** [Makefile:1112: check-TESTS] Error 2 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' make[1]: *** [Makefile:1178: check-am] Error 2 make[1]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' make: *** [Makefile:476: check-recursive] Error 1 + '[' 2 -ne 0 ']' + cat tests/basic-softhsm.log tests/basic-softokn.log tests/certs-softhsm.log tests/certs-softokn.log tests/democa-softhsm.log tests/democa-softokn.log tests/digest-softhsm.log tests/digest-softokn.log tests/ecc-softhsm.log tests/ecc-softokn.log tests/ecdh-softokn.log tests/edwards-softhsm.log tests/fork-softhsm.log tests/fork-softokn.log tests/genkey-softhsm.log tests/genkey-softokn.log tests/hkdf-softokn.log tests/oaepsha2-softokn.log tests/pubkey-softhsm.log tests/pubkey-softokn.log tests/rand-softhsm.log tests/rand-softokn.log tests/readkeys-softhsm.log tests/readkeys-softokn.log tests/rsapss-softokn.log tests/session-softhsm.log tests/session-softokn.log tests/setup-softhsm.log tests/setup-softokn.log tests/test-suite.log tests/tls-softhsm.log tests/tls-softokn.log tests/uri-softhsm.log tests/uri-softokn.log Executing ./tbasic ## Raw Sign check error openssl pkeyutl -sign -inkey "${BASEURI}" -pkeyopt pad-mode:none -in ${TMPPDIR}/64Brandom.bin -out ${TMPPDIR}/raw-sig.bin Public Key operation error 2004DCA8FFFFFF00:error:0200007A:rsa routines:p11prov_sig_operate:data too small for key size:signature.c:874: ## Sign and Verify with provided Hash and RSA openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${PRIURI}" -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-sig.bin openssl pkeyutl -verify -inkey "${PUBURI}" -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-sig.bin Signature Verified Successfully ## Sign and Verify with provided Hash and RSA with DigestInfo struct openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${PRIURI}" -pkeyopt digest:sha256 -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-sig.bin openssl pkeyutl -verify -inkey "${PUBURI}" -pkeyopt digest:sha256 -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-sig.bin Signature Verified Successfully ## DigestSign and DigestVerify with RSA openssl pkeyutl -sign -inkey "${BASEURI}" -digest sha256 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha256-dgstsig.bin openssl pkeyutl -verify -inkey "${BASEURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully openssl pkeyutl -verify -inkey "${PUBURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully RSA basic encrypt and decrypt openssl pkeyutl -encrypt -inkey "${PUBURI}" -pubin -in ${SECRETFILE} -out ${SECRETFILE}.enc openssl pkeyutl -decrypt -inkey "${PRIURI}" -in ${SECRETFILE}.enc -out ${SECRETFILE}.dec ## Test Disallow Public Export openssl pkey -in $PUBURI -pubin -pubout -text ## Test CSR generation from RSA private keys openssl req -new -batch -key "${PRIURI}" -out ${TMPPDIR}/rsa_csr.pem openssl req -in ${TMPPDIR}/rsa_csr.pem -verify -noout Certificate request self-signature verify OK ## Test fetching public keys without PIN in config files openssl pkey -in $PUBURI -pubin -pubout -out ${TMPPDIR}/rsa.pub.nopin.pem openssl pkey -in $ECPUBURI -pubin -pubout -out ${TMPPDIR}/ec.pub.nopin.pem ## Test fetching public keys with a PIN in URI openssl pkey -in $BASEURIWITHPIN -pubin -pubout -out ${TMPPDIR}/rsa.pub.uripin.pem openssl pkey -in $ECBASEURIWITHPIN -pubin -pubout -out ${TMPPDIR}/ec.pub.uripin.pem ## Test prompting without PIN in config files Failed to get expected command output Original command output: Enter pass phrase for PKCS#11 Token (Slot 1844986710 - SoftHSM slot ID 0x6df84356): PKCS11 RSA Private Key (2048 bits) [Can't export and print private key data] URI pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=b7f826bfedf84356;token=token_name;id=%00%01;object=testCert;type=private FAIL basic-softhsm.t (exit status: 1) Executing ./tbasic ## Raw Sign check error openssl pkeyutl -sign -inkey "${BASEURI}" -pkeyopt pad-mode:none -in ${TMPPDIR}/64Brandom.bin -out ${TMPPDIR}/raw-sig.bin Public Key operation error 200444B4FFFFFF00:error:0200007A:rsa routines:p11prov_sig_operate:data too small for key size:signature.c:874: ## Sign and Verify with provided Hash and RSA openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${PRIURI}" -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-sig.bin openssl pkeyutl -verify -inkey "${PUBURI}" -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-sig.bin Signature Verified Successfully ## Sign and Verify with provided Hash and RSA with DigestInfo struct openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${PRIURI}" -pkeyopt digest:sha256 -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-sig.bin openssl pkeyutl -verify -inkey "${PUBURI}" -pkeyopt digest:sha256 -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-sig.bin Signature Verified Successfully ## DigestSign and DigestVerify with RSA openssl pkeyutl -sign -inkey "${BASEURI}" -digest sha256 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha256-dgstsig.bin openssl pkeyutl -verify -inkey "${BASEURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully openssl pkeyutl -verify -inkey "${PUBURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully RSA basic encrypt and decrypt openssl pkeyutl -encrypt -inkey "${PUBURI}" -pubin -in ${SECRETFILE} -out ${SECRETFILE}.enc openssl pkeyutl -decrypt -inkey "${PRIURI}" -in ${SECRETFILE}.enc -out ${SECRETFILE}.dec ## Test Disallow Public Export openssl pkey -in $PUBURI -pubin -pubout -text ## Test CSR generation from RSA private keys openssl req -new -batch -key "${PRIURI}" -out ${TMPPDIR}/rsa_csr.pem openssl req -in ${TMPPDIR}/rsa_csr.pem -verify -noout Certificate request self-signature verify OK ## Test fetching public keys without PIN in config files openssl pkey -in $PUBURI -pubin -pubout -out ${TMPPDIR}/rsa.pub.nopin.pem openssl pkey -in $ECPUBURI -pubin -pubout -out ${TMPPDIR}/ec.pub.nopin.pem ## Test fetching public keys with a PIN in URI openssl pkey -in $BASEURIWITHPIN -pubin -pubout -out ${TMPPDIR}/rsa.pub.uripin.pem openssl pkey -in $ECBASEURIWITHPIN -pubin -pubout -out ${TMPPDIR}/ec.pub.uripin.pem ## Test prompting without PIN in config files Failed to get expected command output Original command output: Enter pass phrase for PKCS#11 Token (Slot 1 - NSS Internal Cryptographic Services): PKCS11 RSA Private Key (2048 bits) [Can't export and print private key data] URI pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%25%97%9A%85%E8%2A%E4%C5%8C%8C%2A%5F%16%BD%A1%90%44%87%10%A9;type=private FAIL basic-softokn.t (exit status: 1) Executing ./tcerts ## Check we can fetch certifiatce objects openssl x509 -in ${CRTURI} -subject -out ${TMPPDIR}/crt-subj.txt openssl x509 -in ${ECCRTURI} -subject -out ${TMPPDIR}/eccrt-subj.txt ## Use storeutl command to match specific certs via params openssl storeutl -certs -subject "${subj}" -out ${TMPPDIR}/storeutl-crt-subj.txt pkcs11:type=cert 0: Certificate openssl storeutl -certs -subject "${subj}" -out ${TMPPDIR}/storeutl-crt-subj.txt pkcs11:type=cert 0: Certificate openssl storeutl -certs -subject "${subj}" -out ${TMPPDIR}/storeutl-crt-subj.txt pkcs11:type=cert 0: Certificate openssl storeutl -certs -subject "${subj}" -out ${TMPPDIR}/storeutl-crt-subj.txt pkcs11:type=cert 0: Certificate PASS certs-softhsm.t (exit status: 0) Executing ./tcerts ## Check we can fetch certifiatce objects openssl x509 -in ${CRTURI} -subject -out ${TMPPDIR}/crt-subj.txt openssl x509 -in ${ECCRTURI} -subject -out ${TMPPDIR}/eccrt-subj.txt ## Use storeutl command to match specific certs via params openssl storeutl -certs -subject "${subj}" -out ${TMPPDIR}/storeutl-crt-subj.txt pkcs11:type=cert 0: Certificate openssl storeutl -certs -subject "${subj}" -out ${TMPPDIR}/storeutl-crt-subj.txt pkcs11:type=cert 0: Certificate openssl storeutl -certs -subject "${subj}" -out ${TMPPDIR}/storeutl-crt-subj.txt pkcs11:type=cert 0: Certificate openssl storeutl -certs -subject "${subj}" -out ${TMPPDIR}/storeutl-crt-subj.txt pkcs11:type=cert 0: Certificate PASS certs-softokn.t (exit status: 0) Executing ./tdemoca ## Set up demoCA ## Generating CA cert if needed openssl req -batch -noenc -x509 -new -key ${PRIURI} -out ${DEMOCA}/cacert.pem ## Generating a new CSR openssl req -batch -noenc -newkey rsa:2048 -subj "/CN=testing-csr-signing/O=PKCS11 Provider/C=US" -keyout ${DEMOCA}/cert.key -out ${DEMOCA}/cert.csr ...+..+.+.........+...+...+.....+..........+..+.+++++++++++++++++++++++++++++++++++++++*.......+.......+.........+..+.......+++++++++++++++++++++++++++++++++++++++*...+.....+......+...+..........+..+............+......+.+...........+....+.....+.+.........+........+...+...+....+...........+.+.........+.....+......+...+..........+...........+....+......+..+...+......+..........+.....+....+....................+.......+........+.......+..+...............+.......+...........+.......+.....+......+.++++++ ..+....+...........+..........+............+..............+...+...+..........+++++++++++++++++++++++++++++++++++++++*...+....+...............+...+..+...+............+++++++++++++++++++++++++++++++++++++++*.........+....+.....+.+..+......+.......+..+......+.+.....++++++ ----- ## Signing the new certificate openssl ca -batch -in ${DEMOCA}/cert.csr -keyfile ${PRIURI} -out ${DEMOCA}/cert.pem Using configuration from /builddir/build/BUILD/pkcs11-provider-0.2/tests/tmp.softhsm/openssl.cnf Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows commonName :ASN.1 12:'testing-csr-signing' organizationName :ASN.1 12:'PKCS11 Provider' countryName :PRINTABLE:'US' Certificate is to be certified until Dec 4 19:32:04 2024 GMT (365 days) 203438B5FFFFFF00:error:40800054:pkcs11:p11prov_GetOperationState:reason(84):interface.gen.c:279:Error returned by C_GetOperationState Write out database with 1 new entries Database updated ## Set up OCSP openssl req -batch -noenc -new -subj "/CN=OCSP/O=PKCS11 Provider/C=US" -key ${PRIURI} -out ${DEMOCA}/ocspSigning.csr openssl ca -batch -keyfile ${PRIURI} -cert ${DEMOCA}/cacert.pem -in ${DEMOCA}/ocspSigning.csr -out ${DEMOCA}/ocspSigning.pem Using configuration from /builddir/build/BUILD/pkcs11-provider-0.2/tests/tmp.softhsm/openssl.cnf Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows commonName :ASN.1 12:'OCSP' organizationName :ASN.1 12:'PKCS11 Provider' countryName :PRINTABLE:'US' Certificate is to be certified until Dec 4 19:32:06 2024 GMT (365 days) 20D4E3A3FFFFFF00:error:40800054:pkcs11:p11prov_GetOperationState:reason(84):interface.gen.c:279:Error returned by C_GetOperationState Write out database with 1 new entries Database updated ## Run OCSP ACCEPT 0.0.0.0:12345 PID=495786 openssl ocsp -CAfile ${DEMOCA}/cacert.pem -issuer ${DEMOCA}/cacert.pem -cert ${DEMOCA}/cert.pem -resp_text -noverify -url http://127.0.0.1:${PORT} ocsp: waiting for OCSP client connections... ocsp: Received request, 1st line: POST / HTTP/1.0 OCSP Request Data: Version: 1 (0x0) Requestor List: Certificate ID: Hash Algorithm: sha1 Issuer Name Hash: 810C6D581B88B8245F66B67E49B738D99BD5F7BB Issuer Key Hash: 911DF9FEBB35832B995D03A58E1F5A560D88B090 Serial Number: 01 Request Extensions: OCSP Nonce: 0410E151D7881A927D80B589A54E797A9A5A OCSP Response Data: OCSP Response Status: successful (0x0) Response Type: Basic OCSP Response Version: 1 (0x0) Responder Id: C = US, O = PKCS11 Provider, CN = OCSP Produced At: Dec 5 19:32:07 2023 GMT Responses: Certificate ID: Hash Algorithm: sha1 Issuer Name Hash: 810C6D581B88B8245F66B67E49B738D99BD5F7BB Issuer Key Hash: 911DF9FEBB35832B995D03A58E1F5A560D88B090 Serial Number: 01 Cert Status: good This Update: Dec 5 19:32:07 2023 GMT Response Extensions: OCSP Nonce: 0410E151D7881A927D80B589A54E797A9A5A Signature Algorithm: sha1WithRSAEncryption Signature Value: 02:e2:e7:b5:c4:38:22:9c:ec:3f:d5:65:f1:7d:09:e2:c7:df: 6f:11:3f:fa:26:3c:82:0e:b2:fd:02:b2:78:2a:f5:8c:ac:28: 05:52:39:53:30:ca:1e:f0:a8:e9:29:eb:4f:09:f0:5a:d8:0a: a9:dd:88:97:e4:dc:de:ad:37:d3:92:5d:5f:40:d4:28:e6:28: d7:f0:2d:04:75:bc:48:3e:83:4d:a4:1a:02:2a:32:af:1f:56: df:c6:40:f6:f6:37:b3:6c:b9:7d:96:b4:20:b8:57:12:ad:54: 68:d7:79:1a:13:ad:2f:58:7f:e3:81:6f:70:ab:93:38:90:b5: 27:da:e9:49:72:2f:ce:d5:f7:b0:18:ed:75:55:65:ec:44:8e: 2a:d5:05:56:44:67:77:e1:a4:bd:9a:92:10:fb:d6:4e:81:54: 8d:7c:af:9a:c3:9c:0f:f6:d8:1f:ab:77:ef:e0:bf:30:49:86: 26:dd:fe:ff:2c:27:33:5e:a1:ad:03:b9:88:d1:28:cf:80:bd: 64:cc:16:cc:b6:99:0f:a6:94:b4:d3:5e:c0:6f:c0:7b:8c:7a: 5d:48:08:c1:8d:51:2a:b0:81:6d:bf:2d:8f:6d:f1:f2:71:fe: 59:65:3a:33:70:ff:f2:57:00:80:95:3c:7e:b1:cf:44:f1:de: f3:9f:56:70 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, ST=New York, L=New York, O=PKCS11 Provider, OU=Testing Harness Validity Not Before: Dec 5 19:32:06 2023 GMT Not After : Dec 4 19:32:06 2024 GMT Subject: C=US, O=PKCS11 Provider, CN=OCSP Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:98:13:52:af:6d:80:81:fd:89:c8:7a:0f:cc:ee: f6:c0:75:6b:61:07:ae:29:56:37:e2:97:90:90:95: fc:7d:d0:52:f7:f6:7a:55:27:cb:c1:c7:2e:41:9c: 08:d0:7e:c7:3c:9e:19:d5:49:de:93:01:6b:44:55: 31:fc:cd:0d:fb:a5:52:bb:98:a5:d6:e7:d5:e4:b1: 82:7c:44:20:34:ca:e2:90:9e:eb:67:54:ca:52:b5: c4:4d:e7:93:d7:83:d3:d7:a0:49:11:fc:33:77:83: 11:12:73:a9:ec:2f:e3:e0:ec:62:d3:2e:24:4f:e9: e6:3a:4c:83:a8:26:3d:38:79:06:be:a6:cd:ba:61: f3:3c:55:31:80:0c:e9:b5:cb:fb:e6:91:41:53:63: f2:bb:ea:1a:85:72:d9:96:91:b9:60:d3:34:a7:da: 47:0d:db:4d:12:ae:f3:51:b4:d5:c7:f7:bb:76:b0: a9:a0:56:65:91:13:1b:a9:4a:bf:e6:7b:31:b9:36: 41:6d:07:f8:d0:f4:c4:b3:50:80:9f:27:df:7b:d1: 51:04:83:46:be:55:ed:ff:cb:3d:1a:45:2c:1e:6e: 89:fa:2b:aa:03:e1:1d:bc:2c:9d:be:93:c0:c6:5c: 42:bc:76:21:da:9d:81:e4:a5:06:22:6b:2b:e4:c7: 4a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: CA:FALSE X509v3 Key Usage: Digital Signature, Non Repudiation, Key Encipherment X509v3 Subject Key Identifier: 91:1D:F9:FE:BB:35:83:2B:99:5D:03:A5:8E:1F:5A:56:0D:88:B0:90 X509v3 Authority Key Identifier: 91:1D:F9:FE:BB:35:83:2B:99:5D:03:A5:8E:1F:5A:56:0D:88:B0:90 S ## Kill any remaining children and wait for them /builddir/build/BUILD/pkcs11-provider-0.2/tests/helpers.sh: line 66: 495786 Killed $CHECKER openssl ocsp -index "${DEMOCA}/index.txt" -rsigner "${DEMOCA}/ocspSigning.pem" -rkey "${PRIURI}" -CA "${DEMOCA}/cacert.pem" -rmd sha1 -port "${PORT}" -text PASS democa-softhsm.t (exit status: 0) Executing ./tdemoca ## Set up demoCA ## Generating CA cert if needed openssl req -batch -noenc -x509 -new -key ${PRIURI} -out ${DEMOCA}/cacert.pem ## Generating a new CSR openssl req -batch -noenc -newkey rsa:2048 -subj "/CN=testing-csr-signing/O=PKCS11 Provider/C=US" -keyout ${DEMOCA}/cert.key -out ${DEMOCA}/cert.csr ..+............+..+......+.......+.....+...+.......+......+.....+.+...+++++++++++++++++++++++++++++++++++++++*.........+..+...+.+++++++++++++++++++++++++++++++++++++++*.....+....+......+......+.....+....+.........+.....+.+.........+.....+.+........+......+....+...+...............++++++ ........+...+...+.+......+.........+...+..+++++++++++++++++++++++++++++++++++++++*..+...............+...+......+...+.+......+...+++++++++++++++++++++++++++++++++++++++*.......+....+..+...+.+...........+......+..........+.....+...+.+.........+......+.....+.+.....+....+...+..+......+....+...+...+........+............+.......+......+..............+.............+..+.+......+...........+.........+.+..+...+.......+...............+..+......+....+.....+......+...+.........+......+.+........+.......+..............................+...+..+....+..+...+..........+......+...+..+......+.............+..+....+........+......+............+....++++++ ----- ## Signing the new certificate openssl ca -batch -in ${DEMOCA}/cert.csr -keyfile ${PRIURI} -out ${DEMOCA}/cert.pem Using configuration from /builddir/build/BUILD/pkcs11-provider-0.2/tests/tmp.softokn/openssl.cnf Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows commonName :ASN.1 12:'testing-csr-signing' organizationName :ASN.1 12:'PKCS11 Provider' countryName :PRINTABLE:'US' Certificate is to be certified until Dec 4 19:31:47 2024 GMT (365 days) 20140785FFFFFF00:error:40800091:pkcs11:p11prov_GetOperationState:There is no active operation of appropriate type in the specified session:interface.gen.c:279:Error returned by C_GetOperationState Write out database with 1 new entries Database updated ## Set up OCSP openssl req -batch -noenc -new -subj "/CN=OCSP/O=PKCS11 Provider/C=US" -key ${PRIURI} -out ${DEMOCA}/ocspSigning.csr openssl ca -batch -keyfile ${PRIURI} -cert ${DEMOCA}/cacert.pem -in ${DEMOCA}/ocspSigning.csr -out ${DEMOCA}/ocspSigning.pem Using configuration from /builddir/build/BUILD/pkcs11-provider-0.2/tests/tmp.softokn/openssl.cnf Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows commonName :ASN.1 12:'OCSP' organizationName :ASN.1 12:'PKCS11 Provider' countryName :PRINTABLE:'US' Certificate is to be certified until Dec 4 19:31:53 2024 GMT (365 days) 20745E87FFFFFF00:error:40800091:pkcs11:p11prov_GetOperationState:There is no active operation of appropriate type in the specified session:interface.gen.c:279:Error returned by C_GetOperationState Write out database with 1 new entries Database updated ## Run OCSP ACCEPT 0.0.0.0:12345 PID=495755 openssl ocsp -CAfile ${DEMOCA}/cacert.pem -issuer ${DEMOCA}/cacert.pem -cert ${DEMOCA}/cert.pem -resp_text -noverify -url http://127.0.0.1:${PORT} ocsp: waiting for OCSP client connections... ocsp: Received request, 1st line: POST / HTTP/1.0 OCSP Request Data: Version: 1 (0x0) Requestor List: Certificate ID: Hash Algorithm: sha1 Issuer Name Hash: 810C6D581B88B8245F66B67E49B738D99BD5F7BB Issuer Key Hash: 712BF94C07F3568FF2EB20007548BAC9471514F6 Serial Number: 01 Request Extensions: OCSP Nonce: 041094CF3B0C259D03BEFDE2B82D5667BFDC OCSP Response Data: OCSP Response Status: successful (0x0) Response Type: Basic OCSP Response Version: 1 (0x0) Responder Id: C = US, O = PKCS11 Provider, CN = OCSP Produced At: Dec 5 19:31:56 2023 GMT Responses: Certificate ID: Hash Algorithm: sha1 Issuer Name Hash: 810C6D581B88B8245F66B67E49B738D99BD5F7BB Issuer Key Hash: 712BF94C07F3568FF2EB20007548BAC9471514F6 Serial Number: 01 Cert Status: good This Update: Dec 5 19:31:56 2023 GMT Response Extensions: OCSP Nonce: 041094CF3B0C259D03BEFDE2B82D5667BFDC Signature Algorithm: sha1WithRSAEncryption Signature Value: 9b:ac:50:d8:ea:f6:68:28:90:0a:66:95:14:bb:c6:38:00:dc: 8b:60:48:2f:63:80:71:c5:cf:51:b8:ca:e0:16:cb:32:27:c3: 19:dc:17:15:a7:c2:d0:3a:49:79:f8:2c:65:d6:db:92:9c:31: 53:66:22:3c:df:af:db:a0:de:69:af:f4:72:a2:05:50:0c:78: 7c:31:27:84:f3:f5:9a:b3:1a:21:e3:11:c0:35:41:93:2e:dd: d2:ee:10:35:f9:9d:8d:09:91:b7:71:24:2d:8c:4a:27:6d:0f: a0:fd:43:bb:78:f8:dc:78:50:ef:07:15:6b:50:02:96:a2:49: c4:d4:a7:50:08:65:86:5b:a1:13:83:cc:78:12:97:a6:76:6e: 87:26:b1:a8:25:49:6d:aa:ff:4d:bd:e4:b1:67:3f:78:c6:0d: ac:be:0b:bf:f5:34:e1:af:d0:89:27:09:9d:e7:f5:e1:ad:7c: be:39:48:24:55:0f:c9:3e:ec:62:51:c8:5c:1e:c9:4c:ea:a0: c7:06:f9:30:75:e8:78:07:1b:01:ee:95:c0:cb:5c:ac:8a:4b: 75:c1:a5:f5:24:85:b1:8a:b3:16:84:3c:01:c9:e5:11:39:32: 90:54:2e:f9:30:0c:32:3e:c8:85:ee:d9:1a:2b:a2:fb:18:f0: 8b:f9:09:01 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, ST=New York, L=New York, O=PKCS11 Provider, OU=Testing Harness Validity Not Before: Dec 5 19:31:53 2023 GMT Not After : Dec 4 19:31:53 2024 GMT Subject: C=US, O=PKCS11 Provider, CN=OCSP Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:e1:1b:b1:c9:2b:82:d4:6d:e6:73:f4:ea:7b:a8: 89:43:f5:24:d3:b8:c5:dc:9c:66:d6:c2:6e:1f:88: 7e:4b:65:cc:f4:93:5c:2b:7d:d0:14:07:eb:47:f5: 73:db:df:38:64:7a:59:5f:7a:37:72:18:be:0a:d5: ab:2e:4c:cf:0a:60:54:72:82:2a:1c:0b:9e:6b:4c: db:0c:1a:09:c2:68:47:b8:ca:f7:8f:c2:0a:00:2b: 6f:0e:2c:18:20:e6:ff:94:33:41:72:1f:98:d7:d8: 39:67:97:6c:50:12:e7:e5:23:91:82:4e:7b:88:60: 2c:b5:e2:29:de:c8:8e:93:90:5c:75:6e:68:e7:52: 82:f6:5c:6b:c4:47:e7:f3:62:c4:9a:f6:61:a0:60: 04:5e:7f:f6:df:38:2f:29:e5:49:9f:d2:83:c1:3a: 9b:a3:65:df:d4:99:dd:29:b1:b6:35:b2:89:81:eb: 3b:29:91:31:aa:89:1e:8e:7b:13:8a:31:b5:27:5f: 25:bd:1a:fc:af:b7:b5:7e:b3:01:e9:d1:64:da:7d: ee:05:f2:30:50:f6:d7:ed:c0:79:07:4d:2e:ab:f5: d0:e9:98:02:20:e5:db:7a:22:57:43:6e:3d:98:d6: 58:30:cd:34:32:02:b0:78:75:27:63:e9:8a:c3:94: bc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: CA:FALSE X509v3 Key Usage: Digital Signature, Non Repudiation, Key Encipherment X509v3 Subject Key Identifier: 71:2B:F9:4C:07:F3:56:8F:F2:EB:20:00:75:48:BA:C9:47:15:14:F6 X509v3 Authority Key Identifier: 71:2B:F9:4C:07:F3:56:8F:F2:EB:20:00:75:48:BA:C9:47:15:14:F6 S ## Kill any remaining children and wait for them ./tdemoca: line 76: 495755 Killed $CHECKER openssl ocsp -index "${DEMOCA}/index.txt" -rsigner "${DEMOCA}/ocspSigning.pem" -rkey "${PRIURI}" -CA "${DEMOCA}/cacert.pem" -rmd sha1 -port "${PORT}" -text PASS democa-softokn.t (exit status: 0) Executing ./tdigest ## Test Digests support sha512-224: Unsupported by pkcs11 token sha512-256: Unsupported by pkcs11 token sha3-224: Unsupported by pkcs11 token sha3-256: Unsupported by pkcs11 token sha3-384: Unsupported by pkcs11 token sha3-512: Unsupported by pkcs11 token PASS digest-softhsm.t (exit status: 0) Executing ./tdigest ## Test Digests support sha512-224: Unsupported by pkcs11 token sha512-256: Unsupported by pkcs11 token PASS digest-softokn.t (exit status: 0) Executing ./tecc ## Export EC Public key to a file openssl pkey -in $ECPUBURI -pubin -pubout -out ${TMPPDIR}/ecout.pub Print EC Public key from private openssl pkey -in $ECPRIURI -pubout -text ## Sign and Verify with provided Hash and EC openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${ECBASEURI}" -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-ecsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-ecsig.bin Signature Verified Successfully openssl pkeyutl -verify -inkey "${TMPPDIR}/ecout.pub" -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-ecsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA-256) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha256 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha256-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA-384) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha384 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha384-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha384 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha384-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA-512) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha512 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha512-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha512 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha512-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA3-256) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha3-256 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha3-256-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha3-256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha3-256-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA3-384) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha3-384 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha3-384-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha3-384 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha3-384-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA3-512) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha3-512 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha3-512-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha3-512 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha3-512-ecdgstsig.bin Signature Verified Successfully ## Test CSR generation from private ECC keys openssl req -new -batch -key "${ECPRIURI}" -out ${TMPPDIR}/ecdsa_csr.pem openssl req -in ${TMPPDIR}/ecdsa_csr.pem -verify -noout Certificate request self-signature verify OK PASS ecc-softhsm.t (exit status: 0) Executing ./tecc ## Export EC Public key to a file openssl pkey -in $ECPUBURI -pubin -pubout -out ${TMPPDIR}/ecout.pub Print EC Public key from private openssl pkey -in $ECPRIURI -pubout -text ## Sign and Verify with provided Hash and EC openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${ECBASEURI}" -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-ecsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-ecsig.bin Signature Verified Successfully openssl pkeyutl -verify -inkey "${TMPPDIR}/ecout.pub" -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-ecsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA-256) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha256 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha256-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA-384) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha384 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha384-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha384 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha384-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA-512) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha512 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha512-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha512 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha512-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA3-256) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha3-256 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha3-256-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha3-256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha3-256-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA3-384) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha3-384 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha3-384-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha3-384 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha3-384-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA3-512) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha3-512 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha3-512-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha3-512 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha3-512-ecdgstsig.bin Signature Verified Successfully ## Test CSR generation from private ECC keys openssl req -new -batch -key "${ECPRIURI}" -out ${TMPPDIR}/ecdsa_csr.pem openssl req -in ${TMPPDIR}/ecdsa_csr.pem -verify -noout Certificate request self-signature verify OK PASS ecc-softokn.t (exit status: 0) Executing ./tecdh ## ECDH Exchange openssl pkeyutl -derive -inkey ${ECBASEURI} -peerkey ${ECPEERPUBURI} -out ${TMPPDIR}/secret.ecdh.bin PASS ecdh-softokn.t (exit status: 0) Executing ./tedwards ## Export ED25519 Public key to a file openssl pkey -in $EDPUBURI -pubin -pubout -out ${TMPPDIR}/edout.pub Print ED25519 Public key from private openssl pkey -in $EDPRIURI -pubout -text ## DigestSign and DigestVerify with ED25519 openssl pkeyutl -sign -inkey "${EDBASEURI}" -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha256-eddgstsig.bin openssl pkeyutl -verify -inkey "${EDBASEURI}" -pubin -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-eddgstsig.bin Signature Verified Successfully ## Test CSR generation from private ED25519 keys openssl req -new -batch -key "${EDPRIURI}" -out ${TMPPDIR}/ed25519_csr.pem openssl req -in ${TMPPDIR}/ed25519_csr.pem -verify -noout Certificate request self-signature verify OK PASS edwards-softhsm.t (exit status: 0) Executing ./tfork Child Done Child Done ALL A-OK! PASS fork-softhsm.t (exit status: 0) Executing ./tfork Child Done Child Done ALL A-OK! PASS fork-softokn.t (exit status: 0) Executing ./tgenkey ALL A-OK!PASS genkey-softhsm.t (exit status: 0) Executing ./tgenkey ALL A-OK!PASS genkey-softokn.t (exit status: 0) Executing ./thkdf ## HKDF Derivation openssl pkeyutl -derive -kdf HKDF -kdflen 48 -pkeyopt md:SHA256 -pkeyopt mode:EXTRACT_AND_EXPAND -pkeyopt hexkey:${HKDF_HEX_SECRET} -pkeyopt hexsalt:${HKDF_HEX_SALT} -pkeyopt hexinfo:${HKDF_HEX_INFO} -out ${TMPPDIR}/hkdf1-out-pkcs11.bin -propquery provider=pkcs11 openssl pkeyutl -derive -kdf HKDF -kdflen 48 -pkeyopt md:SHA256 -pkeyopt mode:EXTRACT_AND_EXPAND -pkeyopt hexkey:${HKDF_HEX_SECRET} -pkeyopt hexsalt:${HKDF_HEX_SALT} -pkeyopt hexinfo:${HKDF_HEX_INFO} -out ${TMPPDIR}/hkdf1-out.bin openssl pkeyutl -derive -kdf HKDF -kdflen 48 -pkeyopt md:SHA256 -pkeyopt mode:EXTRACT_AND_EXPAND -pkeyopt hexkey:${HKDF_HEX_SECRET} -pkeyopt salt:"${HKDF_SALT}" -pkeyopt info:"${HKDF_INFO}" -out ${TMPPDIR}/hkdf2-out-pkcs11.bin -propquery provider=pkcs11 openssl pkeyutl -derive -kdf HKDF -kdflen 48 -pkeyopt md:SHA256 -pkeyopt mode:EXTRACT_AND_EXPAND -pkeyopt hexkey:${HKDF_HEX_SECRET} -pkeyopt salt:"${HKDF_SALT}" -pkeyopt info:"${HKDF_INFO}" -out ${TMPPDIR}/hkdf2-out.bin PASS hkdf-softokn.t (exit status: 0) Executing ./toaepsha2 ## Encrypt and decrypt with RSA OAEP openssl pkeyutl -encrypt -inkey "${BASEURI}" -pubin -pkeyopt pad-mode:oaep -pkeyopt digest:sha256 -pkeyopt mgf1-digest:sha256 -in ${SECRETFILE} -out ${SECRETFILE}.enc openssl pkeyutl -decrypt -inkey "${PRIURI}" -pkeyopt pad-mode:oaep -pkeyopt digest:sha256 -pkeyopt mgf1-digest:sha256 -in ${SECRETFILE}.enc -out ${SECRETFILE}.dec PASS oaepsha2-softokn.t (exit status: 0) Executing ./tpubkey ## Export RSA Public key to a file openssl pkey -in $BASEURI -pubin -pubout -out ${TMPPDIR}/baseout.pub Export Public key to a file (pub-uri) openssl pkey -in $PUBURI -pubin -pubout -out ${TMPPDIR}/pubout.pub Print Public key from private openssl pkey -in $PRIURI -pubout -text ## Export Public check error openssl pkey -in pkcs11:id=%de%ad -pubin -pubout -out ${TMPPDIR}/pubout-invlid.pub Could not read key of Public Key from pkcs11:id=%de%ad ## Export EC Public key to a file openssl pkey -in $ECBASEURI -pubin -pubout -out ${TMPPDIR}/baseecout.pub Export EC Public key to a file (pub-uri) openssl pkey -in $ECPUBURI -pubin -pubout -out ${TMPPDIR}/pubecout.pub Print EC Public key from private openssl pkey -in $ECPRIURI -pubout -text ## Check we can get RSA public keys from certificate objects Export Public key to a file (priv-uri) openssl pkey -in $PRI2URI -pubout -out ${TMPPDIR}/priv-cert.pub Export Public key to a file (base-uri) openssl pkey -in $BASE2URI -pubout -out ${TMPPDIR}/base-cert.pub Export Public EC key to a file (priv-uri) openssl pkey -in $ECPRI2URI -pubout -out ${TMPPDIR}/ec-priv-cert.pub Export Public key to a file (base-uri) openssl pkey -in $ECBASE2URI -pubout -out ${TMPPDIR}/ec-base-cert.pub PASS pubkey-softhsm.t (exit status: 0) Executing ./tpubkey ## Export RSA Public key to a file openssl pkey -in $BASEURI -pubin -pubout -out ${TMPPDIR}/baseout.pub Export Public key to a file (pub-uri) openssl pkey -in $PUBURI -pubin -pubout -out ${TMPPDIR}/pubout.pub Print Public key from private openssl pkey -in $PRIURI -pubout -text ## Export Public check error openssl pkey -in pkcs11:id=%de%ad -pubin -pubout -out ${TMPPDIR}/pubout-invlid.pub Could not read key of Public Key from pkcs11:id=%de%ad ## Export EC Public key to a file openssl pkey -in $ECBASEURI -pubin -pubout -out ${TMPPDIR}/baseecout.pub Export EC Public key to a file (pub-uri) openssl pkey -in $ECPUBURI -pubin -pubout -out ${TMPPDIR}/pubecout.pub Print EC Public key from private openssl pkey -in $ECPRIURI -pubout -text PASS pubkey-softokn.t (exit status: 0) Executing ./trand ## Test PKCS11 RNG openssl rand 1 20E49F97FFFFFF00:error:0308010C:digital envelope routines:inner_evp_generic_fetch:unsupported:crypto/evp/evp_fetch.c:341:Global default library context, Algorithm (PKCS11-RAND : 0), Properties () 20E49F97FFFFFF00:error:12000090:random number generator:rand_new_drbg:unable to fetch drbg:crypto/rand/rand_lib.c:647: openssl rand 1 0 PASS rand-softhsm.t (exit status: 0) Executing ./trand ## Test PKCS11 RNG openssl rand 1 2094028CFFFFFF00:error:0308010C:digital envelope routines:inner_evp_generic_fetch:unsupported:crypto/evp/evp_fetch.c:341:Global default library context, Algorithm (PKCS11-RAND : 0), Properties () 2094028CFFFFFF00:error:12000090:random number generator:rand_new_drbg:unable to fetch drbg:crypto/rand/rand_lib.c:647: openssl rand 1  PASS rand-softokn.t (exit status: 0) Executing ./treadkeys PASS readkeys-softhsm.t (exit status: 0) Executing ./treadkeys PASS readkeys-softokn.t (exit status: 0) Executing ./trsapss ## DigestSign and DigestVerify with RSA PSS openssl pkeyutl -sign -inkey "${BASEURI}" -digest sha256 -pkeyopt pad-mode:pss -pkeyopt mgf1-digest:sha256 -pkeyopt saltlen:digest -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha256-dgstsig.bin openssl pkeyutl -verify -inkey "${BASEURI}" -pubin -digest sha256 -pkeyopt pad-mode:pss -pkeyopt mgf1-digest:sha256 -pkeyopt saltlen:digest -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully Re-verify using OpenSSL default provider openssl pkeyutl -verify -inkey "${PUBURI}" -pubin -digest sha256 -pkeyopt pad-mode:pss -pkeyopt mgf1-digest:sha256 -pkeyopt saltlen:digest -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully PASS rsapss-softokn.t (exit status: 0) Executing ./tsession ALL A-OK!PASS session-softhsm.t (exit status: 0) Executing ./tsession ALL A-OK!PASS session-softokn.t (exit status: 0) ######################################## ## Searching for SoftHSM PKCS#11 library Using softhsm path /usr/lib64/pkcs11/libsofthsm2.so ######################################## ## Set up testing system Slot 0 has a free/uninitialized token. The token has been initialized and is reassigned to slot 1844986710 Creating new Self Sign CA Using slot 0 with a present token (0x6df84356) Key pair generated: Private Key Object; RSA label: caCert ID: 0000 Usage: decrypt, sign, unwrap Access: sensitive, always sensitive, never extractable, local Public Key Object; RSA 2048 bits label: caCert ID: 0000 Usage: encrypt, verify, wrap Access: local Generating a self signed certificate... X.509 Certificate Information: Version: 3 Serial Number (hex): 01 Validity: Not Before: Tue Dec 05 19:28:48 UTC 2023 Not After: Wed Dec 04 19:28:48 UTC 2024 Subject: CN=Issuer Subject Public Key Algorithm: RSA Algorithm Security Level: Medium (2048 bits) Modulus (bits 2048): 00:96:c2:4f:b6:26:a9:2f:e0:f2:d2:41:d7:20:bc:d1 8a:59:4c:0d:8c:dd:ba:49:d3:53:90:6f:1e:99:ec:ac e3:00:84:41:ae:78:6e:22:55:9d:27:ba:16:fc:1a:61 e7:43:0b:0f:76:27:7e:0b:10:46:ea:d3:9f:83:89:1e 8e:b9:65:97:41:11:74:60:6e:2c:4e:c0:0f:54:c0:8e cb:ff:3b:d5:c9:18:a3:bb:26:21:8c:82:d1:bd:ab:3d ba:d5:62:8e:4b:ff:7c:75:8c:9c:46:0b:f8:16:9e:bb 8d:9a:bc:46:c3:65:e8:7e:63:0f:d2:36:ad:35:a4:ae 26:ca:cd:b8:70:30:17:51:0f:e8:01:a4:94:69:2d:c9 2d:24:0a:0f:87:f2:4a:73:ff:4e:ff:c2:21:60:b0:24 dd:9f:c5:d4:65:d4:69:35:e8:d6:23:1d:6a:86:92:2c 7f:f5:61:e1:6e:3e:40:75:db:cf:16:eb:4a:e5:15:15 27:e5:f1:72:45:fe:ea:b2:d2:d9:b7:a1:ad:8f:9a:39 ef:1f:da:d8:fa:79:86:af:d1:81:a6:cd:cb:d7:90:da 19:7a:db:05:19:8c:8b:ac:1c:28:54:ae:f7:80:5f:0e 59:a5:e3:e0:a4:49:43:e5:54:5b:a2:ba:9f:6a:98:4d f5 Exponent (bits 24): 01:00:01 Extensions: Basic Constraints (critical): Certificate Authority (CA): TRUE Subject Alternative Name (not critical): RFC822Name: testcert@example.org Key Usage (critical): Digital signature. Subject Key Identifier (not critical): cb3c2763861172a3657004a9440c80b863845fa4 Other Information: Public Key ID: sha1:cb3c2763861172a3657004a9440c80b863845fa4 sha256:b9e84f7e988379ac749912a36d5f45af57503181a5a2727cbffb220007566e15 Public Key PIN: pin-sha256:uehPfpiDeax0mRKjbV9Fr1dQMYGlonJ8v/siAAdWbhU= Signing certificate... Using slot 0 with a present token (0x6df84356) Created certificate: Certificate Object; type = X.509 cert label: caCert subject: DN: CN=Issuer serial: 01 ID: 0000 Using slot 0 with a present token (0x6df84356) Key pair generated: Private Key Object; RSA label: testCert ID: 0001 Usage: decrypt, sign, unwrap Access: sensitive, always sensitive, never extractable, local Public Key Object; RSA 2048 bits label: testCert ID: 0001 Usage: encrypt, verify, wrap Access: local Generating a signed certificate... Expiration time: Wed Dec 4 14:28:52 2024 CA expiration time: Wed Dec 4 14:28:48 2024 Warning: The time set exceeds the CA's expiration time X.509 Certificate Information: Version: 3 Serial Number (hex): 03 Validity: Not Before: Tue Dec 05 19:28:52 UTC 2023 Not After: Wed Dec 04 19:28:52 UTC 2024 Subject: CN=My Test Cert,O=PKCS11 Provider Subject Public Key Algorithm: RSA Algorithm Security Level: Medium (2048 bits) Modulus (bits 2048): 00:98:13:52:af:6d:80:81:fd:89:c8:7a:0f:cc:ee:f6 c0:75:6b:61:07:ae:29:56:37:e2:97:90:90:95:fc:7d d0:52:f7:f6:7a:55:27:cb:c1:c7:2e:41:9c:08:d0:7e c7:3c:9e:19:d5:49:de:93:01:6b:44:55:31:fc:cd:0d fb:a5:52:bb:98:a5:d6:e7:d5:e4:b1:82:7c:44:20:34 ca:e2:90:9e:eb:67:54:ca:52:b5:c4:4d:e7:93:d7:83 d3:d7:a0:49:11:fc:33:77:83:11:12:73:a9:ec:2f:e3 e0:ec:62:d3:2e:24:4f:e9:e6:3a:4c:83:a8:26:3d:38 79:06:be:a6:cd:ba:61:f3:3c:55:31:80:0c:e9:b5:cb fb:e6:91:41:53:63:f2:bb:ea:1a:85:72:d9:96:91:b9 60:d3:34:a7:da:47:0d:db:4d:12:ae:f3:51:b4:d5:c7 f7:bb:76:b0:a9:a0:56:65:91:13:1b:a9:4a:bf:e6:7b 31:b9:36:41:6d:07:f8:d0:f4:c4:b3:50:80:9f:27:df 7b:d1:51:04:83:46:be:55:ed:ff:cb:3d:1a:45:2c:1e 6e:89:fa:2b:aa:03:e1:1d:bc:2c:9d:be:93:c0:c6:5c 42:bc:76:21:da:9d:81:e4:a5:06:22:6b:2b:e4:c7:4a df Exponent (bits 24): 01:00:01 Extensions: Basic Constraints (critical): Certificate Authority (CA): FALSE Subject Alternative Name (not critical): RFC822Name: testcert@example.org Key Usage (critical): Digital signature. Key encipherment. Subject Key Identifier (not critical): 15596d257b7d67a655b004d5098fd580e4522c97 Authority Key Identifier (not critical): cb3c2763861172a3657004a9440c80b863845fa4 Other Information: Public Key ID: sha1:15596d257b7d67a655b004d5098fd580e4522c97 sha256:ad5fa8cd763e88d3ec2e062ce277aa2462f306a1d1c215d7ccd9d9ea7336c0b7 Public Key PIN: pin-sha256:rV+ozXY+iNPsLgYs4neqJGLzBqHRwhXXzNnZ6nM2wLc= Signing certificate... Using slot 0 with a present token (0x6df84356) Created certificate: Certificate Object; type = X.509 cert label: testCert subject: DN: O=PKCS11 Provider, CN=My Test Cert serial: 03 ID: 0001 RSA PKCS11 URIS pkcs11:id=%00%01;pin-value=12345678 pkcs11:id=%00%01 pkcs11:type=public;id=%00%01 pkcs11:type=private;id=%00%01 pkcs11:type=cert;object=testCert Using slot 0 with a present token (0x6df84356) Key pair generated: Private Key Object; EC label: ecCert ID: 0002 Usage: decrypt, sign, unwrap, derive Access: sensitive, always sensitive, never extractable, local Public Key Object; EC EC_POINT 256 bits EC_POINT: 044104bc7aa5927b333d5c52e87ba46b2ccbddf1ca8ae62f7f52a39373176f0cfc74752904b2c00e4abfcf747534368a655d089b6f7b787a0013ad641842c6ff061d40 EC_PARAMS: 06082a8648ce3d030107 label: ecCert ID: 0002 Usage: encrypt, verify, wrap, derive Access: local Generating a signed certificate... Expiration time: Wed Dec 4 14:28:55 2024 CA expiration time: Wed Dec 4 14:28:48 2024 Warning: The time set exceeds the CA's expiration time X.509 Certificate Information: Version: 3 Serial Number (hex): 04 Validity: Not Before: Tue Dec 05 19:28:55 UTC 2023 Not After: Wed Dec 04 19:28:55 UTC 2024 Subject: CN=My EC Cert,O=PKCS11 Provider Subject Public Key Algorithm: EC/ECDSA Algorithm Security Level: High (256 bits) Curve: SECP256R1 X: 00:bc:7a:a5:92:7b:33:3d:5c:52:e8:7b:a4:6b:2c:cb dd:f1:ca:8a:e6:2f:7f:52:a3:93:73:17:6f:0c:fc:74 75 Y: 29:04:b2:c0:0e:4a:bf:cf:74:75:34:36:8a:65:5d:08 9b:6f:7b:78:7a:00:13:ad:64:18:42:c6:ff:06:1d:40 Extensions: Basic Constraints (critical): Certificate Authority (CA): FALSE Subject Alternative Name (not critical): RFC822Name: testcert@example.org Key Usage (critical): Digital signature. Subject Key Identifier (not critical): eed6d9e5cd518e95c8774a3d6c5ff0963cd0dfef Authority Key Identifier (not critical): cb3c2763861172a3657004a9440c80b863845fa4 Other Information: Public Key ID: sha1:eed6d9e5cd518e95c8774a3d6c5ff0963cd0dfef sha256:90ae2239b493ab4a9b5e6fae867838755966039311795a013de6c7537ae3a219 Public Key PIN: pin-sha256:kK4iObSTq0qbXm+uhng4dVlmA5MReVoBPebHU3rjohk= Signing certificate... Using slot 0 with a present token (0x6df84356) Created certificate: Certificate Object; type = X.509 cert label: ecCert subject: DN: O=PKCS11 Provider, CN=My EC Cert serial: 04 ID: 0002 Using slot 0 with a present token (0x6df84356) Key pair generated: Private Key Object; EC label: ecPeerCert ID: 0003 Usage: decrypt, sign, unwrap, derive Access: sensitive, always sensitive, never extractable, local Public Key Object; EC EC_POINT 256 bits EC_POINT: 044104795c002b094ee0560cb6f6ea7fa07e74dea2f9e3ac846848acef1fd673983fc31dfd354240a1c9f77d435803d4e3092c1484a7f2ea3b5b3e0d397e96006003b9 EC_PARAMS: 06082a8648ce3d030107 label: ecPeerCert ID: 0003 Usage: encrypt, verify, wrap, derive Access: local Generating a signed certificate... Expiration time: Wed Dec 4 14:28:57 2024 CA expiration time: Wed Dec 4 14:28:48 2024 Warning: The time set exceeds the CA's expiration time X.509 Certificate Information: Version: 3 Serial Number (hex): 05 Validity: Not Before: Tue Dec 05 19:28:57 UTC 2023 Not After: Wed Dec 04 19:28:57 UTC 2024 Subject: CN=My Peer EC Cert,O=PKCS11 Provider Subject Public Key Algorithm: EC/ECDSA Algorithm Security Level: High (256 bits) Curve: SECP256R1 X: 79:5c:00:2b:09:4e:e0:56:0c:b6:f6:ea:7f:a0:7e:74 de:a2:f9:e3:ac:84:68:48:ac:ef:1f:d6:73:98:3f:c3 Y: 1d:fd:35:42:40:a1:c9:f7:7d:43:58:03:d4:e3:09:2c 14:84:a7:f2:ea:3b:5b:3e:0d:39:7e:96:00:60:03:b9 Extensions: Basic Constraints (critical): Certificate Authority (CA): FALSE Subject Alternative Name (not critical): RFC822Name: testcert@example.org Key Usage (critical): Digital signature. Subject Key Identifier (not critical): 8cd369a3c6473bc904886d544c3f12fd0c3ea3be Authority Key Identifier (not critical): cb3c2763861172a3657004a9440c80b863845fa4 Other Information: Public Key ID: sha1:8cd369a3c6473bc904886d544c3f12fd0c3ea3be sha256:3cf349d398cb83eaf14773a278dfe5c42ff521cd2b11ac975e3921d24ee001c4 Public Key PIN: pin-sha256:PPNJ05jLg+rxR3OieN/lxC/1Ic0rEayXXjkh0k7gAcQ= Signing certificate... Using slot 0 with a present token (0x6df84356) Created certificate: Certificate Object; type = X.509 cert label: ecPeerCert subject: DN: O=PKCS11 Provider, CN=My Peer EC Cert serial: 05 ID: 0003 EC PKCS11 URIS pkcs11:id=%00%02;pin-value=12345678 pkcs11:id=%00%02 pkcs11:type=public;id=%00%02 pkcs11:type=private;id=%00%02 pkcs11:type=cert;object=ecCert pkcs11:id=%00%03;pin-value=12345678 pkcs11:id=%00%03 pkcs11:type=public;id=%00%03 pkcs11:type=private;id=%00%03 pkcs11:type=cert;object=ecPeerCert Using slot 0 with a present token (0x6df84356) Key pair generated: Private Key Object; EC_EDWARDS label: edCert ID: 0004 Usage: decrypt, sign, unwrap, derive Access: sensitive, always sensitive, never extractable, local Public Key Object; EC_EDWARDS EC_POINT 255 bits EC_POINT: 0420ce70e416f12c7f6cd0f0e372ed6459257d32404c6593874fc6796a62625f77bd EC_PARAMS: 130c656477617264733235353139 (OID 2.21.100.119.97.114.100.115.50.53.53.49.57) label: edCert ID: 0004 Usage: encrypt, verify, wrap, derive Access: local Generating a signed certificate... Expiration time: Wed Dec 4 14:29:00 2024 CA expiration time: Wed Dec 4 14:28:48 2024 Warning: The time set exceeds the CA's expiration time X.509 Certificate Information: Version: 3 Serial Number (hex): 06 Validity: Not Before: Tue Dec 05 19:29:00 UTC 2023 Not After: Wed Dec 04 19:29:00 UTC 2024 Subject: CN=My ED25519 Cert,O=PKCS11 Provider Subject Public Key Algorithm: EdDSA (Ed25519) Algorithm Security Level: High (256 bits) Curve: Ed25519 X: ce:70:e4:16:f1:2c:7f:6c:d0:f0:e3:72:ed:64:59:25 7d:32:40:4c:65:93:87:4f:c6:79:6a:62:62:5f:77:bd Extensions: Basic Constraints (critical): Certificate Authority (CA): FALSE Subject Alternative Name (not critical): RFC822Name: testcert@example.org Key Usage (critical): Digital signature. Subject Key Identifier (not critical): 3ee8b60380931c2e177b7fcacf9180f76b97658b Authority Key Identifier (not critical): cb3c2763861172a3657004a9440c80b863845fa4 Other Information: Public Key ID: sha1:3ee8b60380931c2e177b7fcacf9180f76b97658b sha256:a7481d846ad13b992fffec92c20cd7642962041207fc0143d7a82f92ec15dfe6 Public Key PIN: pin-sha256:p0gdhGrRO5kv/+ySwgzXZCliBBIH/AFD16gvkuwV3+Y= Signing certificate... Using slot 0 with a present token (0x6df84356) Created certificate: Certificate Object; type = X.509 cert label: edCert subject: DN: O=PKCS11 Provider, CN=My ED25519 Cert serial: 06 ID: 0004 ED25519 PKCS11 URIS pkcs11:id=%00%04 pkcs11:type=public;id=%00%04 pkcs11:type=private;id=%00%04 pkcs11:type=cert;object=edCert ## generate RSA key pair, self-signed certificate, remove public key Using slot 0 with a present token (0x6df84356) Key pair generated: Private Key Object; RSA label: testCert2 ID: 0005 Usage: decrypt, sign, unwrap Access: sensitive, always sensitive, never extractable, local Public Key Object; RSA 2048 bits label: testCert2 ID: 0005 Usage: encrypt, verify, wrap Access: local Generating a signed certificate... Expiration time: Wed Dec 4 14:29:07 2024 CA expiration time: Wed Dec 4 14:28:48 2024 Warning: The time set exceeds the CA's expiration time X.509 Certificate Information: Version: 3 Serial Number (hex): 07 Validity: Not Before: Tue Dec 05 19:29:07 UTC 2023 Not After: Wed Dec 04 19:29:07 UTC 2024 Subject: CN=My Test Cert 2,O=PKCS11 Provider Subject Public Key Algorithm: RSA Algorithm Security Level: Medium (2048 bits) Modulus (bits 2048): 00:a3:15:99:09:ab:59:1a:53:00:84:ce:55:6e:b2:80 a1:67:27:73:8b:95:74:d9:dd:a1:cc:e4:aa:87:a2:82 ae:5e:f9:bc:20:00:0f:3b:3b:08:94:7a:06:62:51:3b e3:04:ba:39:dd:f5:71:14:60:97:77:fa:a4:84:63:e8 7b:91:0c:7b:da:91:a8:58:79:52:db:84:76:9d:2a:b4 5b:66:c8:ac:a6:d6:fa:64:85:7c:8f:bc:95:2f:68:63 a6:41:44:92:46:4a:82:f5:4d:0c:7d:93:bf:26:95:3b 35:08:c1:f2:bb:85:4c:0a:9d:f1:e2:0a:12:f5:26:6b 2a:53:86:d8:15:7c:d1:68:43:cc:1c:b8:af:1e:46:e7 71:4d:9a:4a:31:fe:17:e9:6a:e4:75:58:0d:c2:3d:58 05:5e:a3:9b:1c:53:bd:25:76:15:ec:c2:fb:06:5d:de 73:3e:99:7f:12:45:e6:c6:59:c6:1e:83:62:e4:ae:a6 3c:56:7f:8e:71:ab:ca:90:3e:a6:fb:10:af:c2:c2:2c c8:66:86:3a:95:38:0b:73:ad:c4:60:cf:c8:83:f2:13 c5:a4:ac:74:05:f8:f7:86:a7:f4:8c:11:ff:6b:30:cf 2e:9c:37:ff:9f:b6:0f:a7:60:63:4e:5f:83:8a:2d:95 85 Exponent (bits 24): 01:00:01 Extensions: Basic Constraints (critical): Certificate Authority (CA): FALSE Subject Alternative Name (not critical): RFC822Name: testcert@example.org Key Usage (critical): Digital signature. Key encipherment. Subject Key Identifier (not critical): 0ee8519a1ed256c768eed7bc5fd022c180e06326 Authority Key Identifier (not critical): cb3c2763861172a3657004a9440c80b863845fa4 Other Information: Public Key ID: sha1:0ee8519a1ed256c768eed7bc5fd022c180e06326 sha256:b91b2680b1323ee9be816507f11b1bf2b37c48239b6c8705031ead876f34ec37 Public Key PIN: pin-sha256:uRsmgLEyPum+gWUH8Rsb8rN8SCObbIcFAx6th2807Dc= Signing certificate... Using slot 0 with a present token (0x6df84356) Created certificate: Certificate Object; type = X.509 cert label: testCert2 subject: DN: O=PKCS11 Provider, CN=My Test Cert 2 serial: 07 ID: 0005 Using slot 0 with a present token (0x6df84356) RSA2 PKCS11 URIS pkcs11:id=%00%05;pin-value=12345678 pkcs11:id=%00%05 pkcs11:type=private;id=%00%05 pkcs11:type=cert;object=testCert2 ## generate EC key pair, self-signed certificate, remove public key Using slot 0 with a present token (0x6df84356) Key pair generated: Private Key Object; EC label: ecCert2 ID: 0006 Usage: decrypt, sign, unwrap, derive Access: sensitive, always sensitive, never extractable, local Public Key Object; EC EC_POINT 384 bits EC_POINT: 046104c417d01534733a7972631622861084e09f7ec8c885c85082747b725261348a43865d17b9864c759d0ba33b73d6dd6853153baeecf5d741bfabc9e75d53dc613f7ab2ef3ddebc1f3cb9f9fa3b661f9f9cf85457c478213d8ec8b3b68056cb8a74 EC_PARAMS: 06052b81040022 label: ecCert2 ID: 0006 Usage: encrypt, verify, wrap, derive Access: local Generating a signed certificate... Expiration time: Wed Dec 4 14:29:10 2024 CA expiration time: Wed Dec 4 14:28:48 2024 Warning: The time set exceeds the CA's expiration time X.509 Certificate Information: Version: 3 Serial Number (hex): 08 Validity: Not Before: Tue Dec 05 19:29:10 UTC 2023 Not After: Wed Dec 04 19:29:10 UTC 2024 Subject: CN=My EC Cert 2,O=PKCS11 Provider Subject Public Key Algorithm: EC/ECDSA Algorithm Security Level: Ultra (384 bits) Curve: SECP384R1 X: 00:c4:17:d0:15:34:73:3a:79:72:63:16:22:86:10:84 e0:9f:7e:c8:c8:85:c8:50:82:74:7b:72:52:61:34:8a 43:86:5d:17:b9:86:4c:75:9d:0b:a3:3b:73:d6:dd:68 53 Y: 15:3b:ae:ec:f5:d7:41:bf:ab:c9:e7:5d:53:dc:61:3f 7a:b2:ef:3d:de:bc:1f:3c:b9:f9:fa:3b:66:1f:9f:9c f8:54:57:c4:78:21:3d:8e:c8:b3:b6:80:56:cb:8a:74 Extensions: Basic Constraints (critical): Certificate Authority (CA): FALSE Subject Alternative Name (not critical): RFC822Name: testcert@example.org Key Usage (critical): Digital signature. Subject Key Identifier (not critical): 7444e0fa167fea8c7ce9d9b22558c5d493841354 Authority Key Identifier (not critical): cb3c2763861172a3657004a9440c80b863845fa4 Other Information: Public Key ID: sha1:7444e0fa167fea8c7ce9d9b22558c5d493841354 sha256:f54034121484b624e4cd674284162a6ca8564843f0d8fce7f80dd7b377f56d91 Public Key PIN: pin-sha256:9UA0EhSEtiTkzWdChBYqbKhWSEPw2Pzn+A3Xs3f1bZE= Signing certificate... Using slot 0 with a present token (0x6df84356) Created certificate: Certificate Object; type = X.509 cert label: ecCert2 subject: DN: O=PKCS11 Provider, CN=My EC Cert 2 serial: 08 ID: 0006 Using slot 0 with a present token (0x6df84356) EC2 PKCS11 URIS pkcs11:id=%00%06;pin-value=12345678 pkcs11:id=%00%06 pkcs11:type=private;id=%00%06 pkcs11:type=cert;object=ecCert2 ## Show contents of softhsm token ---------------------------------------------------------------------------------------------------- Using slot 0 with a present token (0x6df84356) Certificate Object; type = X.509 cert label: ecCert2 subject: DN: O=PKCS11 Provider, CN=My EC Cert 2 serial: 08 ID: 0006 Public Key Object; EC EC_POINT 256 bits EC_POINT: 044104bc7aa5927b333d5c52e87ba46b2ccbddf1ca8ae62f7f52a39373176f0cfc74752904b2c00e4abfcf747534368a655d089b6f7b787a0013ad641842c6ff061d40 EC_PARAMS: 06082a8648ce3d030107 label: ecCert ID: 0002 Usage: encrypt, verify, wrap, derive Access: local Certificate Object; type = X.509 cert label: testCert subject: DN: O=PKCS11 Provider, CN=My Test Cert serial: 03 ID: 0001 Private Key Object; EC_EDWARDS label: edCert ID: 0004 Usage: decrypt, sign, unwrap, derive Access: sensitive, always sensitive, never extractable, local Certificate Object; type = X.509 cert label: testCert2 subject: DN: O=PKCS11 Provider, CN=My Test Cert 2 serial: 07 ID: 0005 Public Key Object; EC_EDWARDS EC_POINT 255 bits EC_POINT: 0420ce70e416f12c7f6cd0f0e372ed6459257d32404c6593874fc6796a62625f77bd EC_PARAMS: 130c656477617264733235353139 (OID 2.21.100.119.97.114.100.115.50.53.53.49.57) label: edCert ID: 0004 Usage: encrypt, verify, wrap, derive Access: local Public Key Object; EC EC_POINT 256 bits EC_POINT: 044104795c002b094ee0560cb6f6ea7fa07e74dea2f9e3ac846848acef1fd673983fc31dfd354240a1c9f77d435803d4e3092c1484a7f2ea3b5b3e0d397e96006003b9 EC_PARAMS: 06082a8648ce3d030107 label: ecPeerCert ID: 0003 Usage: encrypt, verify, wrap, derive Access: local Certificate Object; type = X.509 cert label: edCert subject: DN: O=PKCS11 Provider, CN=My ED25519 Cert serial: 06 ID: 0004 Certificate Object; type = X.509 cert label: ecPeerCert subject: DN: O=PKCS11 Provider, CN=My Peer EC Cert serial: 05 ID: 0003 Private Key Object; EC label: ecCert ID: 0002 Usage: decrypt, sign, unwrap, derive Access: sensitive, always sensitive, never extractable, local Private Key Object; EC label: ecCert2 ID: 0006 Usage: decrypt, sign, unwrap, derive Access: sensitive, always sensitive, never extractable, local Private Key Object; EC label: ecPeerCert ID: 0003 Usage: decrypt, sign, unwrap, derive Access: sensitive, always sensitive, never extractable, local Public Key Object; RSA 2048 bits label: caCert ID: 0000 Usage: encrypt, verify, wrap Access: local Private Key Object; RSA label: caCert ID: 0000 Usage: decrypt, sign, unwrap Access: sensitive, always sensitive, never extractable, local Certificate Object; type = X.509 cert label: ecCert subject: DN: O=PKCS11 Provider, CN=My EC Cert serial: 04 ID: 0002 Private Key Object; RSA label: testCert2 ID: 0005 Usage: decrypt, sign, unwrap Access: sensitive, always sensitive, never extractable, local Public Key Object; RSA 2048 bits label: testCert ID: 0001 Usage: encrypt, verify, wrap Access: local Private Key Object; RSA label: testCert ID: 0001 Usage: decrypt, sign, unwrap Access: sensitive, always sensitive, never extractable, local Certificate Object; type = X.509 cert label: caCert subject: DN: CN=Issuer serial: 01 ID: 0000 ---------------------------------------------------------------------------------------------------- ## Output configurations Generate openssl config file Export test variables to tmp.softhsm/testvars ## ######################################## ######################################## ## Set up testing system Creating new NSS Database Creating new Self Sign CA Creating Certificate request for 'My Test Cert' RSA PKCS11 URIS pkcs11:id=%25%97%9a%85%e8%2a%e4%c5%8c%8c%2a%5f%16%bd%a1%90%44%87%10%a9;pin-value=12345678 pkcs11:id=%25%97%9a%85%e8%2a%e4%c5%8c%8c%2a%5f%16%bd%a1%90%44%87%10%a9 pkcs11:type=public;id=%25%97%9a%85%e8%2a%e4%c5%8c%8c%2a%5f%16%bd%a1%90%44%87%10%a9 pkcs11:type=private;id=%25%97%9a%85%e8%2a%e4%c5%8c%8c%2a%5f%16%bd%a1%90%44%87%10%a9 pkcs11:type=cert;object=testCert Creating Certificate request for 'My EC Cert' Creating Certificate request for 'My Peer EC Cert' EC PKCS11 URIS pkcs11:id=%8f%5c%d5%d1%e1%3d%b0%22%79%7c%3e%65%da%7b%49%83%d9%0a%97%3c;pin-value=12345678 pkcs11:id=%8f%5c%d5%d1%e1%3d%b0%22%79%7c%3e%65%da%7b%49%83%d9%0a%97%3c pkcs11:type=public;id=%8f%5c%d5%d1%e1%3d%b0%22%79%7c%3e%65%da%7b%49%83%d9%0a%97%3c pkcs11:type=private;id=%8f%5c%d5%d1%e1%3d%b0%22%79%7c%3e%65%da%7b%49%83%d9%0a%97%3c pkcs11:type=cert;object=ecCert pkcs11:id=%9c%97%4b%04%7b%d3%22%44%3a%70%29%f5%fb%67%65%af%61%6f%c2%cc pkcs11:type=public;id=%9c%97%4b%04%7b%d3%22%44%3a%70%29%f5%fb%67%65%af%61%6f%c2%cc pkcs11:type=private;id=%9c%97%4b%04%7b%d3%22%44%3a%70%29%f5%fb%67%65%af%61%6f%c2%cc pkcs11:type=cert;object=ecPeerCert ## Show contents of softoken ---------------------------------------------------------------------------------------------------- Certificate Nickname Trust Attributes SSL,S/MIME,JAR/XPI selfCA Cu,Cu,Cu testCert u,u,u ecCert u,u,u ecPeerCert u,u,u certutil: Checking token "NSS Certificate DB" in slot "NSS User Private Key and Certificate Services" < 0> rsa d7a777585ff56a0f6a9ba1f5c65bca4f68cd87c4 NSS Certificate DB:selfCA < 1> rsa 25979a85e82ae4c58c8c2a5f16bda190448710a9 NSS Certificate DB:testCert < 2> ec 8f5cd5d1e13db022797c3e65da7b4983d90a973c NSS Certificate DB:ecCert < 3> ec 9c974b047bd322443a7029f5fb6765af616fc2cc NSS Certificate DB:ecPeerCert ---------------------------------------------------------------------------------------------------- ## Output configurations Generate openssl config file Export tests variables to tmp.softokn/testvars ## ######################################## =============================================== pkcs11-provider 0.2: tests/test-suite.log =============================================== # TOTAL: 31 # PASS: 27 # SKIP: 0 # XFAIL: 0 # FAIL: 4 # XPASS: 0 # ERROR: 0 .. contents:: :depth: 2 FAIL: basic-softokn =================== Executing ./tbasic ## Raw Sign check error openssl pkeyutl -sign -inkey "${BASEURI}" -pkeyopt pad-mode:none -in ${TMPPDIR}/64Brandom.bin -out ${TMPPDIR}/raw-sig.bin Public Key operation error 200444B4FFFFFF00:error:0200007A:rsa routines:p11prov_sig_operate:data too small for key size:signature.c:874: ## Sign and Verify with provided Hash and RSA openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${PRIURI}" -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-sig.bin openssl pkeyutl -verify -inkey "${PUBURI}" -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-sig.bin Signature Verified Successfully ## Sign and Verify with provided Hash and RSA with DigestInfo struct openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${PRIURI}" -pkeyopt digest:sha256 -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-sig.bin openssl pkeyutl -verify -inkey "${PUBURI}" -pkeyopt digest:sha256 -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-sig.bin Signature Verified Successfully ## DigestSign and DigestVerify with RSA openssl pkeyutl -sign -inkey "${BASEURI}" -digest sha256 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha256-dgstsig.bin openssl pkeyutl -verify -inkey "${BASEURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully openssl pkeyutl -verify -inkey "${PUBURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully RSA basic encrypt and decrypt openssl pkeyutl -encrypt -inkey "${PUBURI}" -pubin -in ${SECRETFILE} -out ${SECRETFILE}.enc openssl pkeyutl -decrypt -inkey "${PRIURI}" -in ${SECRETFILE}.enc -out ${SECRETFILE}.dec ## Test Disallow Public Export openssl pkey -in $PUBURI -pubin -pubout -text ## Test CSR generation from RSA private keys openssl req -new -batch -key "${PRIURI}" -out ${TMPPDIR}/rsa_csr.pem openssl req -in ${TMPPDIR}/rsa_csr.pem -verify -noout Certificate request self-signature verify OK ## Test fetching public keys without PIN in config files openssl pkey -in $PUBURI -pubin -pubout -out ${TMPPDIR}/rsa.pub.nopin.pem openssl pkey -in $ECPUBURI -pubin -pubout -out ${TMPPDIR}/ec.pub.nopin.pem ## Test fetching public keys with a PIN in URI openssl pkey -in $BASEURIWITHPIN -pubin -pubout -out ${TMPPDIR}/rsa.pub.uripin.pem openssl pkey -in $ECBASEURIWITHPIN -pubin -pubout -out ${TMPPDIR}/ec.pub.uripin.pem ## Test prompting without PIN in config files Failed to get expected command output Original command output: Enter pass phrase for PKCS#11 Token (Slot 1 - NSS Internal Cryptographic Services): PKCS11 RSA Private Key (2048 bits) [Can't export and print private key data] URI pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%25%97%9A%85%E8%2A%E4%C5%8C%8C%2A%5F%16%BD%A1%90%44%87%10%A9;type=private FAIL basic-softokn.t (exit status: 1) FAIL: basic-softhsm =================== Executing ./tbasic ## Raw Sign check error openssl pkeyutl -sign -inkey "${BASEURI}" -pkeyopt pad-mode:none -in ${TMPPDIR}/64Brandom.bin -out ${TMPPDIR}/raw-sig.bin Public Key operation error 2004DCA8FFFFFF00:error:0200007A:rsa routines:p11prov_sig_operate:data too small for key size:signature.c:874: ## Sign and Verify with provided Hash and RSA openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${PRIURI}" -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-sig.bin openssl pkeyutl -verify -inkey "${PUBURI}" -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-sig.bin Signature Verified Successfully ## Sign and Verify with provided Hash and RSA with DigestInfo struct openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${PRIURI}" -pkeyopt digest:sha256 -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-sig.bin openssl pkeyutl -verify -inkey "${PUBURI}" -pkeyopt digest:sha256 -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-sig.bin Signature Verified Successfully ## DigestSign and DigestVerify with RSA openssl pkeyutl -sign -inkey "${BASEURI}" -digest sha256 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha256-dgstsig.bin openssl pkeyutl -verify -inkey "${BASEURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully openssl pkeyutl -verify -inkey "${PUBURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully RSA basic encrypt and decrypt openssl pkeyutl -encrypt -inkey "${PUBURI}" -pubin -in ${SECRETFILE} -out ${SECRETFILE}.enc openssl pkeyutl -decrypt -inkey "${PRIURI}" -in ${SECRETFILE}.enc -out ${SECRETFILE}.dec ## Test Disallow Public Export openssl pkey -in $PUBURI -pubin -pubout -text ## Test CSR generation from RSA private keys openssl req -new -batch -key "${PRIURI}" -out ${TMPPDIR}/rsa_csr.pem openssl req -in ${TMPPDIR}/rsa_csr.pem -verify -noout Certificate request self-signature verify OK ## Test fetching public keys without PIN in config files openssl pkey -in $PUBURI -pubin -pubout -out ${TMPPDIR}/rsa.pub.nopin.pem openssl pkey -in $ECPUBURI -pubin -pubout -out ${TMPPDIR}/ec.pub.nopin.pem ## Test fetching public keys with a PIN in URI openssl pkey -in $BASEURIWITHPIN -pubin -pubout -out ${TMPPDIR}/rsa.pub.uripin.pem openssl pkey -in $ECBASEURIWITHPIN -pubin -pubout -out ${TMPPDIR}/ec.pub.uripin.pem ## Test prompting without PIN in config files Failed to get expected command output Original command output: Enter pass phrase for PKCS#11 Token (Slot 1844986710 - SoftHSM slot ID 0x6df84356): PKCS11 RSA Private Key (2048 bits) [Can't export and print private key data] URI pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=b7f826bfedf84356;token=token_name;id=%00%01;object=testCert;type=private FAIL basic-softhsm.t (exit status: 1) FAIL: tls-softokn ================= Executing ./ttls ## Test SSL_CTX creation SSL Context works! ## Test an actual TLS connection 20C49E91FFFFFF00:error:8000006F:system library:BIO_connect:Connection refused:crypto/bio/bio_sock2.c:114:calling connect() 20C49E91FFFFFF00:error:10000067:BIO routines:BIO_connect:connect error:crypto/bio/bio_sock2.c:116: 20C49E91FFFFFF00:error:8000006F:system library:BIO_connect:Connection refused:crypto/bio/bio_sock2.c:114:calling connect() 20C49E91FFFFFF00:error:10000067:BIO routines:BIO_connect:connect error:crypto/bio/bio_sock2.c:116: connect:errno=111 Check message was successfully delivered over TLS kill: sending signal to 495973 failed: No such process /builddir/build/BUILD/pkcs11-provider-0.2/tests/helpers.sh: line 66: 495971 Killed $CHECKER openssl s_server -accept "${PORT}" -key "${PRIURI}" -cert "${CRTURI}" 0<&3 Server output: FAIL tls-softokn.t (exit status: 1) FAIL: tls-softhsm ================= Executing ./ttls ## Test SSL_CTX creation SSL Context works! ## Test an actual TLS connection 20B43CBBFFFFFF00:error:8000006F:system library:BIO_connect:Connection refused:crypto/bio/bio_sock2.c:114:calling connect() 20B43CBBFFFFFF00:error:10000067:BIO routines:BIO_connect:connect error:crypto/bio/bio_sock2.c:116: 20B43CBBFFFFFF00:error:8000006F:system library:BIO_connect:Connection refused:crypto/bio/bio_sock2.c:114:calling connect() 20B43CBBFFFFFF00:error:10000067:BIO routines:BIO_connect:connect error:crypto/bio/bio_sock2.c:116: connect:errno=111 Check message was successfully delivered over TLS Using default temp DH parameters ACCEPT kill: sending signal to 495996 failed: No such process Server output: ./ttls: line 26: 495994 Killed $CHECKER openssl s_server -accept "${PORT}" -key "${PRIURI}" -cert "${CRTURI}" 0<&3 FAIL tls-softhsm.t (exit status: 1) Executing ./ttls ## Test SSL_CTX creation SSL Context works! ## Test an actual TLS connection 20B43CBBFFFFFF00:error:8000006F:system library:BIO_connect:Connection refused:crypto/bio/bio_sock2.c:114:calling connect() 20B43CBBFFFFFF00:error:10000067:BIO routines:BIO_connect:connect error:crypto/bio/bio_sock2.c:116: 20B43CBBFFFFFF00:error:8000006F:system library:BIO_connect:Connection refused:crypto/bio/bio_sock2.c:114:calling connect() 20B43CBBFFFFFF00:error:10000067:BIO routines:BIO_connect:connect error:crypto/bio/bio_sock2.c:116: connect:errno=111 Check message was successfully delivered over TLS Using default temp DH parameters ACCEPT kill: sending signal to 495996 failed: No such process Server output: ./ttls: line 26: 495994 Killed $CHECKER openssl s_server -accept "${PORT}" -key "${PRIURI}" -cert "${CRTURI}" 0<&3 FAIL tls-softhsm.t (exit status: 1) Executing ./ttls ## Test SSL_CTX creation SSL Context works! ## Test an actual TLS connection 20C49E91FFFFFF00:error:8000006F:system library:BIO_connect:Connection refused:crypto/bio/bio_sock2.c:114:calling connect() 20C49E91FFFFFF00:error:10000067:BIO routines:BIO_connect:connect error:crypto/bio/bio_sock2.c:116: 20C49E91FFFFFF00:error:8000006F:system library:BIO_connect:Connection refused:crypto/bio/bio_sock2.c:114:calling connect() 20C49E91FFFFFF00:error:10000067:BIO routines:BIO_connect:connect error:crypto/bio/bio_sock2.c:116: connect:errno=111 Check message was successfully delivered over TLS kill: sending signal to 495973 failed: No such process /builddir/build/BUILD/pkcs11-provider-0.2/tests/helpers.sh: line 66: 495971 Killed $CHECKER openssl s_server -accept "${PORT}" -key "${PRIURI}" -cert "${CRTURI}" 0<&3 Server output: FAIL tls-softokn.t (exit status: 1) Executing ./turi ## Check that storeutl returns URIs openssl storeutl -text pkcs11: ## Check returned URIs work to find objects $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=b7f826bfedf84356;token=token_name;id=%43%32%90%50%3E%69%44%82%0A%7B%B5%E7%F8%7F%FD%11;object=Test%20EC%20gen%20[%2543%2532%2590];type=public openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=b7f826bfedf84356;token=token_name;id=%00%02;object=ecCert;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=b7f826bfedf84356;token=token_name;id=%43%32%90%50%3E%69%44%82%0A%7B%B5%E7%F8%7F%FD%11;object=Test%20EC%20gen%20[%2543%2532%2590];type=private openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=b7f826bfedf84356;token=token_name;id=%BE%4D%6E%86%54%AB%03%D2%C0%2E%7B%74%43%C9%60%1F;object=be4d6e86;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=b7f826bfedf84356;token=token_name;id=%00%03;object=ecPeerCert;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=b7f826bfedf84356;token=token_name;id=%00%02;object=ecCert;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=b7f826bfedf84356;token=token_name;id=%00%06;object=ecCert2;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=b7f826bfedf84356;token=token_name;id=%BE%4D%6E%86%54%AB%03%D2%C0%2E%7B%74%43%C9%60%1F;object=be4d6e86;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=b7f826bfedf84356;token=token_name;id=%00%03;object=ecPeerCert;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=b7f826bfedf84356;token=token_name;id=%00%00;object=caCert;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=b7f826bfedf84356;token=token_name;id=%00%00;object=caCert;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=b7f826bfedf84356;token=token_name;id=%00%05;object=testCert2;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=b7f826bfedf84356;token=token_name;id=%00%01;object=testCert;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=b7f826bfedf84356;token=token_name;id=%7B%6B%7D%0D%EA%8F%B0%10%62%84%83%EB%D1%B2%5F%DD;object=Test%20RSA-PSS%20gen%20[%257b%256b%257d];type=public openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=b7f826bfedf84356;token=token_name;id=%BF%31%E8%B4%57%C7%6B%13%ED%5F%88%F6%60%86%E8%35;object=Test%20RSA%20gen%20[%25bf%2531%25e8];type=public openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=b7f826bfedf84356;token=token_name;id=%7B%6B%7D%0D%EA%8F%B0%10%62%84%83%EB%D1%B2%5F%DD;object=Test%20RSA-PSS%20gen%20[%257b%256b%257d];type=private openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=b7f826bfedf84356;token=token_name;id=%BF%31%E8%B4%57%C7%6B%13%ED%5F%88%F6%60%86%E8%35;object=Test%20RSA%20gen%20[%25bf%2531%25e8];type=private openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=b7f826bfedf84356;token=token_name;id=%00%01;object=testCert;type=private openssl storeutl -text "$uri" ## Check each URI component is tested $cmp=pkcs11:model=SoftHSM%20v2 openssl storeutl -text "pkcs11:${cmp}" $cmp=manufacturer=SoftHSM%20project openssl storeutl -text "pkcs11:${cmp}" $cmp=serial=b7f826bfedf84356 openssl storeutl -text "pkcs11:${cmp}" $cmp=token=token_name openssl storeutl -text "pkcs11:${cmp}" $cmp=id=%43%32%90%50%3E%69%44%82%0A%7B%B5%E7%F8%7F%FD%11 openssl storeutl -text "pkcs11:${cmp}" $cmp=object=Test%20EC%20gen%20[%2543%2532%2590] openssl storeutl -text "pkcs11:${cmp}" $cmp=type=public openssl storeutl -text "pkcs11:${cmp}" PASS uri-softhsm.t (exit status: 0) Executing ./turi ## Check that storeutl returns URIs openssl storeutl -text pkcs11: ## Check returned URIs work to find objects $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%2F%3B%07%10%5C%5B%EE%4A%6F%92%BF%E9%17%1E%23%AC;object=2f3b0710;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%73%76%81%28%BE%46%2F%7C%A4%96%D1%DC%8C%E0%5D%9E;object=Test%20RSA%20gen%20[%2573%2576%2581];type=public openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%E6%00%81%A2%E7%1C%4C%2C%C2%23%2F%29%59%48%43%D1;object=Test%20RSA-PSS%20gen%20[%25e6%2500%2581];type=public openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%89%FE%33%37%6C%92%61%3B%60%7A%16%E5%74%7F%EB%1C;object=Test%20EC%20gen%20[%2589%25fe%2533];type=public openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%D7%A7%77%58%5F%F5%6A%0F%6A%9B%A1%F5%C6%5B%CA%4F%68%CD%87%C4;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%25%97%9A%85%E8%2A%E4%C5%8C%8C%2A%5F%16%BD%A1%90%44%87%10%A9;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%8F%5C%D5%D1%E1%3D%B0%22%79%7C%3E%65%DA%7B%49%83%D9%0A%97%3C;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%9C%97%4B%04%7B%D3%22%44%3A%70%29%F5%FB%67%65%AF%61%6F%C2%CC;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%2F%3B%07%10%5C%5B%EE%4A%6F%92%BF%E9%17%1E%23%AC;object=2f3b0710;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%73%76%81%28%BE%46%2F%7C%A4%96%D1%DC%8C%E0%5D%9E;object=Test%20RSA%20gen%20[%2573%2576%2581];type=private openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%E6%00%81%A2%E7%1C%4C%2C%C2%23%2F%29%59%48%43%D1;object=Test%20RSA-PSS%20gen%20[%25e6%2500%2581];type=private openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%89%FE%33%37%6C%92%61%3B%60%7A%16%E5%74%7F%EB%1C;object=Test%20EC%20gen%20[%2589%25fe%2533];type=private openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%D7%A7%77%58%5F%F5%6A%0F%6A%9B%A1%F5%C6%5B%CA%4F%68%CD%87%C4;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%25%97%9A%85%E8%2A%E4%C5%8C%8C%2A%5F%16%BD%A1%90%44%87%10%A9;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%8F%5C%D5%D1%E1%3D%B0%22%79%7C%3E%65%DA%7B%49%83%D9%0A%97%3C;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%9C%97%4B%04%7B%D3%22%44%3A%70%29%F5%FB%67%65%AF%61%6F%C2%CC;type=private openssl storeutl -text "$uri" ## Check each URI component is tested $cmp=pkcs11:model=NSS%203 openssl storeutl -text "pkcs11:${cmp}" $cmp=manufacturer=Mozilla%20Foundation openssl storeutl -text "pkcs11:${cmp}" $cmp=serial=0000000000000000 openssl storeutl -text "pkcs11:${cmp}" $cmp=token=NSS%20Certificate%20DB openssl storeutl -text "pkcs11:${cmp}" $cmp=id=%2F%3B%07%10%5C%5B%EE%4A%6F%92%BF%E9%17%1E%23%AC openssl storeutl -text "pkcs11:${cmp}" $cmp=object=2f3b0710 openssl storeutl -text "pkcs11:${cmp}" $cmp=type=public openssl storeutl -text "pkcs11:${cmp}" PASS uri-softokn.t (exit status: 0) RPM build errors: + exit 1 error: Bad exit status from /var/tmp/rpm-tmp.HIbZgg (%check) Bad exit status from /var/tmp/rpm-tmp.HIbZgg (%check) Child return code was: 1 EXCEPTION: [Error('Command failed: \n # bash --login -c /usr/bin/rpmbuild -bb --noclean --target riscv64 --nodeps /builddir/build/SPECS/pkcs11-provider.spec\n', 1)] Traceback (most recent call last): File "/usr/lib/python3.11/site-packages/mockbuild/trace_decorator.py", line 93, in trace result = func(*args, **kw) ^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.11/site-packages/mockbuild/util.py", line 597, in do_with_status raise exception.Error("Command failed: \n # %s\n%s" % (command, output), child.returncode) mockbuild.exception.Error: Command failed: # bash --login -c /usr/bin/rpmbuild -bb --noclean --target riscv64 --nodeps /builddir/build/SPECS/pkcs11-provider.spec