Mock Version: 5.0 Mock Version: 5.0 Mock Version: 5.0 ENTER ['do_with_status'](['bash', '--login', '-c', '/usr/bin/rpmbuild -bs --noclean --target riscv64 --nodeps /builddir/build/SPECS/pkcs11-provider.spec'], chrootPath='/var/lib/mock/f39-build-1862389-42499/root'env={'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;\\007"', 'PS1': ' \\s-\\v\\$ ', 'LANG': 'C.UTF-8'}shell=Falselogger=timeout=864000uid=996gid=135user='mockbuild'nspawn_args=[]unshare_net=TrueprintOutput=False) Executing command: ['bash', '--login', '-c', '/usr/bin/rpmbuild -bs --noclean --target riscv64 --nodeps /builddir/build/SPECS/pkcs11-provider.spec'] with env {'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;\\007"', 'PS1': ' \\s-\\v\\$ ', 'LANG': 'C.UTF-8'} and shell False Building target platforms: riscv64 Building for target riscv64 setting SOURCE_DATE_EPOCH=1689897600 Wrote: /builddir/build/SRPMS/pkcs11-provider-0.2-2.fc39.src.rpm Child return code was: 0 ENTER ['do_with_status'](['bash', '--login', '-c', '/usr/bin/rpmbuild -bb --noclean --target riscv64 --nodeps /builddir/build/SPECS/pkcs11-provider.spec'], chrootPath='/var/lib/mock/f39-build-1862389-42499/root'env={'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;\\007"', 'PS1': ' \\s-\\v\\$ ', 'LANG': 'C.UTF-8'}shell=Falselogger=timeout=864000uid=996gid=135user='mockbuild'nspawn_args=[]unshare_net=TrueprintOutput=False) Executing command: ['bash', '--login', '-c', '/usr/bin/rpmbuild -bb --noclean --target riscv64 --nodeps /builddir/build/SPECS/pkcs11-provider.spec'] with env {'TERM': 'vt100', 'SHELL': '/bin/bash', 'HOME': '/builddir', 'HOSTNAME': 'mock', 'PATH': '/usr/bin:/bin:/usr/sbin:/sbin', 'PROMPT_COMMAND': 'printf "\\033]0;\\007"', 'PS1': ' \\s-\\v\\$ ', 'LANG': 'C.UTF-8'} and shell False Building target platforms: riscv64 Building for target riscv64 setting SOURCE_DATE_EPOCH=1689897600 Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.QUAz6X + umask 022 + cd /builddir/build/BUILD + cd /builddir/build/BUILD + rm -rf pkcs11-provider-0.2 + /usr/lib/rpm/rpmuncompress -x /builddir/build/SOURCES/pkcs11-provider-0.2.tar.xz + STATUS=0 + '[' 0 -ne 0 ']' + cd pkcs11-provider-0.2 + rm -rf /builddir/build/BUILD/pkcs11-provider-0.2-SPECPARTS + /usr/bin/mkdir -p /builddir/build/BUILD/pkcs11-provider-0.2-SPECPARTS + /usr/bin/chmod -Rf a+rX,u+w,g-w,o-w . + RPM_EC=0 ++ jobs -p + exit 0 Executing(%build): /bin/sh -e /var/tmp/rpm-tmp.2xWqDU + umask 022 + cd /builddir/build/BUILD + CFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer ' + export CFLAGS + CXXFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer ' + export CXXFLAGS + FFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -I/usr/lib64/gfortran/modules ' + export FFLAGS + FCFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -I/usr/lib64/gfortran/modules ' + export FCFLAGS + VALAFLAGS=-g + export VALAFLAGS + RUSTFLAGS='-Copt-level=3 -Cdebuginfo=2 -Ccodegen-units=1 -Cstrip=none -Cforce-frame-pointers=yes -Clink-arg=-Wl,-z,relro -Clink-arg=-Wl,-z,now -Clink-arg=-specs=/usr/lib/rpm/redhat/redhat-package-notes --cap-lints=warn' + export RUSTFLAGS + LDFLAGS='-Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes ' + export LDFLAGS + LT_SYS_LIBRARY_PATH=/usr/lib64: + export LT_SYS_LIBRARY_PATH + CC=gcc + export CC + CXX=g++ + export CXX + cd pkcs11-provider-0.2 + autoreconf -fi libtoolize: putting auxiliary files in '.'. libtoolize: copying file './ltmain.sh' libtoolize: putting macros in AC_CONFIG_MACRO_DIRS, 'm4'. libtoolize: copying file 'm4/libtool.m4' libtoolize: copying file 'm4/ltoptions.m4' libtoolize: copying file 'm4/ltsugar.m4' libtoolize: copying file 'm4/ltversion.m4' libtoolize: copying file 'm4/lt~obsolete.m4' configure.ac:12: installing './compile' configure.ac:8: installing './missing' src/Makefile.am: installing './depcomp' + CFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer ' + export CFLAGS + CXXFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer ' + export CXXFLAGS + FFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -I/usr/lib64/gfortran/modules ' + export FFLAGS + FCFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -I/usr/lib64/gfortran/modules ' + export FCFLAGS + VALAFLAGS=-g + export VALAFLAGS + RUSTFLAGS='-Copt-level=3 -Cdebuginfo=2 -Ccodegen-units=1 -Cstrip=none -Cforce-frame-pointers=yes -Clink-arg=-Wl,-z,relro -Clink-arg=-Wl,-z,now -Clink-arg=-specs=/usr/lib/rpm/redhat/redhat-package-notes --cap-lints=warn' + export RUSTFLAGS + LDFLAGS='-Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes ' + export LDFLAGS + LT_SYS_LIBRARY_PATH=/usr/lib64: + export LT_SYS_LIBRARY_PATH + CC=gcc + export CC + CXX=g++ + export CXX + '[' '-flto=auto -ffat-lto-objectsx' '!=' x ']' ++ find . -type f -name configure -print + for file in $(find . -type f -name configure -print) + /usr/bin/sed -r --in-place=.backup 's/^char \(\*f\) \(\) = /__attribute__ ((used)) char (*f) () = /g' ./configure + diff -u ./configure.backup ./configure + mv ./configure.backup ./configure + /usr/bin/sed -r --in-place=.backup 's/^char \(\*f\) \(\);/__attribute__ ((used)) char (*f) ();/g' ./configure + diff -u ./configure.backup ./configure + mv ./configure.backup ./configure + /usr/bin/sed -r --in-place=.backup 's/^char \$2 \(\);/__attribute__ ((used)) char \$2 ();/g' ./configure + diff -u ./configure.backup ./configure --- ./configure.backup 2023-11-30 01:02:49.043157439 -0500 +++ ./configure 2023-11-30 01:03:28.093164092 -0500 @@ -1768,7 +1768,7 @@ #ifdef __cplusplus extern "C" #endif -char $2 (); +__attribute__ ((used)) char $2 (); /* The GNU C library defines this for functions which it implements to always fail with ENOSYS. Some functions are actually named something starting with __ and the normal name is an alias. */ + /usr/bin/sed --in-place=.backup '1{$!N;$!N};$!N;s/int x = 1;\nint y = 0;\nint z;\nint nan;/volatile int x = 1; volatile int y = 0; volatile int z, nan;/;P;D' ./configure + diff -u ./configure.backup ./configure + mv ./configure.backup ./configure + /usr/bin/sed --in-place=.backup 's#^lt_cv_sys_global_symbol_to_cdecl=.*#lt_cv_sys_global_symbol_to_cdecl="sed -n -e '\''s/^T .* \\(.*\\)$/extern int \\1();/p'\'' -e '\''s/^$symcode* .* \\(.*\\)$/extern char \\1;/p'\''"#' ./configure + diff -u ./configure.backup ./configure --- ./configure.backup 2023-11-30 01:03:28.093164092 -0500 +++ ./configure 2023-11-30 01:03:29.363164309 -0500 @@ -7051,7 +7051,7 @@ # Transform an extracted symbol line into a proper C declaration. # Some systems (esp. on ia64) link data and code symbols differently, # so use this general approach. -lt_cv_sys_global_symbol_to_cdecl="$SED -n"\ +lt_cv_sys_global_symbol_to_cdecl="sed -n -e 's/^T .* \(.*\)$/extern int \1();/p' -e 's/^$symcode* .* \(.*\)$/extern char \1;/p'" $lt_cdecl_hook\ " -e 's/^T .* \(.*\)$/extern int \1();/p'"\ " -e 's/^$symcode$symcode* .* \(.*\)$/extern char \1;/p'" @@ -15312,7 +15312,7 @@ compiler='`$ECHO "$compiler" | $SED "$delay_single_quote_subst"`' GCC='`$ECHO "$GCC" | $SED "$delay_single_quote_subst"`' lt_cv_sys_global_symbol_pipe='`$ECHO "$lt_cv_sys_global_symbol_pipe" | $SED "$delay_single_quote_subst"`' -lt_cv_sys_global_symbol_to_cdecl='`$ECHO "$lt_cv_sys_global_symbol_to_cdecl" | $SED "$delay_single_quote_subst"`' +lt_cv_sys_global_symbol_to_cdecl="sed -n -e 's/^T .* \(.*\)$/extern int \1();/p' -e 's/^$symcode* .* \(.*\)$/extern char \1;/p'" lt_cv_sys_global_symbol_to_import='`$ECHO "$lt_cv_sys_global_symbol_to_import" | $SED "$delay_single_quote_subst"`' lt_cv_sys_global_symbol_to_c_name_address='`$ECHO "$lt_cv_sys_global_symbol_to_c_name_address" | $SED "$delay_single_quote_subst"`' lt_cv_sys_global_symbol_to_c_name_address_lib_prefix='`$ECHO "$lt_cv_sys_global_symbol_to_c_name_address_lib_prefix" | $SED "$delay_single_quote_subst"`' + '[' 1 = 1 ']' +++ dirname ./configure ++ find . -name config.guess -o -name config.sub + for i in $(find $(dirname ./configure) -name config.guess -o -name config.sub) ++ basename ./config.sub + '[' -f /usr/lib/rpm/redhat/config.sub ']' + /usr/bin/rm -f ./config.sub ++ basename ./config.sub + /usr/bin/cp -fv /usr/lib/rpm/redhat/config.sub ./config.sub '/usr/lib/rpm/redhat/config.sub' -> './config.sub' + for i in $(find $(dirname ./configure) -name config.guess -o -name config.sub) ++ basename ./config.guess + '[' -f /usr/lib/rpm/redhat/config.guess ']' + /usr/bin/rm -f ./config.guess ++ basename ./config.guess + /usr/bin/cp -fv /usr/lib/rpm/redhat/config.guess ./config.guess '/usr/lib/rpm/redhat/config.guess' -> './config.guess' + '[' 1 = 1 ']' + '[' x '!=' 'x-Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld' ']' ++ find . -name ltmain.sh + for i in $(find . -name ltmain.sh) + /usr/bin/sed -i.backup -e 's~compiler_flags=$~compiler_flags="-Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld"~' ./ltmain.sh ++ grep -q runstatedir=DIR ./configure ++ echo --runstatedir=/run + ./configure --build=riscv64-koji-linux-gnu --host=riscv64-koji-linux-gnu --program-prefix= --disable-dependency-tracking --prefix=/usr --exec-prefix=/usr --bindir=/usr/bin --sbindir=/usr/sbin --sysconfdir=/etc --datadir=/usr/share --includedir=/usr/include --libdir=/usr/lib64 --libexecdir=/usr/libexec --localstatedir=/var --runstatedir=/run --sharedstatedir=/var/lib --mandir=/usr/share/man --infodir=/usr/share/info checking for a BSD-compatible install... /usr/bin/install -c checking whether build environment is sane... yes checking for a race-free mkdir -p... /usr/bin/mkdir -p checking for gawk... gawk checking whether make sets $(MAKE)... yes checking whether make supports nested variables... yes checking for riscv64-koji-linux-gnu-gcc... gcc checking whether the C compiler works... yes checking for C compiler default output file name... a.out checking for suffix of executables... checking whether we are cross compiling... no checking for suffix of object files... o checking whether the compiler supports GNU C... yes checking whether gcc accepts -g... yes checking for gcc option to enable C11 features... none needed checking whether gcc understands -c and -o together... yes checking whether make supports the include directive... yes (GNU style) checking dependency style of gcc... none checking for riscv64-koji-linux-gnu-ar... no checking for riscv64-koji-linux-gnu-lib... no checking for riscv64-koji-linux-gnu-link... no checking for ar... ar checking the archiver (ar) interface... ar checking build system type... riscv64-koji-linux-gnu checking host system type... riscv64-koji-linux-gnu checking how to print strings... printf checking for a sed that does not truncate output... /usr/bin/sed checking for grep that handles long lines and -e... /usr/bin/grep checking for egrep... /usr/bin/grep -E checking for fgrep... /usr/bin/grep -F checking for ld used by gcc... /usr/bin/ld checking if the linker (/usr/bin/ld) is GNU ld... yes checking for BSD- or MS-compatible name lister (nm)... /usr/bin/nm -B checking the name lister (/usr/bin/nm -B) interface... BSD nm checking whether ln -s works... yes checking the maximum length of command line arguments... 1572864 checking how to convert riscv64-koji-linux-gnu file names to riscv64-koji-linux-gnu format... func_convert_file_noop checking how to convert riscv64-koji-linux-gnu file names to toolchain format... func_convert_file_noop checking for /usr/bin/ld option to reload object files... -r checking for riscv64-koji-linux-gnu-file... no checking for file... file checking for riscv64-koji-linux-gnu-objdump... no checking for objdump... objdump checking how to recognize dependent libraries... pass_all checking for riscv64-koji-linux-gnu-dlltool... no checking for dlltool... no checking how to associate runtime and link libraries... printf %s\n checking for riscv64-koji-linux-gnu-ar... ar checking for archiver @FILE support... @ checking for riscv64-koji-linux-gnu-strip... no checking for strip... strip checking for riscv64-koji-linux-gnu-ranlib... no checking for ranlib... ranlib checking command to parse /usr/bin/nm -B output from gcc object... ./configure: line 7057: -e 's/^T .* \(.*\)$/extern int \1();/p' -e 's/^[ABCDGIRSTW][ABCDGIRSTW]* .* \(.*\)$/extern char \1;/p': No such file or directory ok checking for sysroot... no checking for a working dd... /usr/bin/dd checking how to truncate binary pipes... /usr/bin/dd bs=4096 count=1 checking for riscv64-koji-linux-gnu-mt... no checking for mt... no checking if : is a manifest tool... no checking for stdio.h... yes checking for stdlib.h... yes checking for string.h... yes checking for inttypes.h... yes checking for stdint.h... yes checking for strings.h... yes checking for sys/stat.h... yes checking for sys/types.h... yes checking for unistd.h... yes checking for dlfcn.h... yes checking for objdir... .libs checking if gcc supports -fno-rtti -fno-exceptions... no checking for gcc option to produce PIC... -fPIC -DPIC checking if gcc PIC flag -fPIC -DPIC works... yes checking if gcc static flag -static works... no checking if gcc supports -c -o file.o... yes checking if gcc supports -c -o file.o... (cached) yes checking whether the gcc linker (/usr/bin/ld) supports shared libraries... yes checking whether -lc should be explicitly linked in... no checking dynamic linker characteristics... GNU/Linux ld.so checking how to hardcode library paths into programs... immediate checking whether stripping libraries is possible... yes checking if libtool supports shared libraries... yes checking whether to build shared libraries... yes checking whether to build static libraries... yes checking for riscv64-koji-linux-gnu-pkg-config... no checking for pkg-config... /usr/bin/pkg-config checking pkg-config is at least version 0.9.0... yes checking whether C compiler accepts -std=c11... yes checking for valgrind... no checking whether C compiler accepts -fno-strict-aliasing... yes checking whether C compiler accepts -Werror -fno-delete-null-pointer-checks... yes checking whether C compiler accepts -fdiagnostics-show-option... yes checking for libcrypto >= 3.0.7... yes checking for libcrypto >= 3.0.7, libssl... yes checking for --with-address-sanitizer... no checking for /usr/lib64/libsoftokn3.so... yes checking for string.h... (cached) yes checking for dlfcn.h... (cached) yes checking for _Bool... yes checking for stdbool.h that conforms to C99... yes checking whether byte ordering is bigendian... no checking for inline... inline checking for size_t... yes checking for strpbrk... yes checking that generated files are newer than configure... done configure: creating ./config.status config.status: creating Makefile config.status: creating docs/Makefile config.status: creating src/Makefile config.status: creating tests/Makefile config.status: creating src/config.h config.status: executing depfiles commands config.status: executing libtool commands + /usr/bin/make -O -j8 V=1 VERBOSE=1 Making all in src /usr/bin/make all-am make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-debug.lo `test -f 'debug.c' || echo './'`debug.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c debug.c -fPIC -DPIC -o .libs/pkcs11_la-debug.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c debug.c -o pkcs11_la-debug.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-kdf.lo `test -f 'kdf.c' || echo './'`kdf.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c kdf.c -fPIC -DPIC -o .libs/pkcs11_la-kdf.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c kdf.c -o pkcs11_la-kdf.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-exchange.lo `test -f 'exchange.c' || echo './'`exchange.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c exchange.c -fPIC -DPIC -o .libs/pkcs11_la-exchange.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c exchange.c -o pkcs11_la-exchange.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-asymmetric_cipher.lo `test -f 'asymmetric_cipher.c' || echo './'`asymmetric_cipher.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c asymmetric_cipher.c -fPIC -DPIC -o .libs/pkcs11_la-asymmetric_cipher.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c asymmetric_cipher.c -o pkcs11_la-asymmetric_cipher.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-digests.lo `test -f 'digests.c' || echo './'`digests.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c digests.c -fPIC -DPIC -o .libs/pkcs11_la-digests.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c digests.c -o pkcs11_la-digests.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-encoder.lo `test -f 'encoder.c' || echo './'`encoder.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c encoder.c -fPIC -DPIC -o .libs/pkcs11_la-encoder.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c encoder.c -o pkcs11_la-encoder.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-keymgmt.lo `test -f 'keymgmt.c' || echo './'`keymgmt.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c keymgmt.c -fPIC -DPIC -o .libs/pkcs11_la-keymgmt.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c keymgmt.c -o pkcs11_la-keymgmt.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-random.lo `test -f 'random.c' || echo './'`random.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c random.c -fPIC -DPIC -o .libs/pkcs11_la-random.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c random.c -o pkcs11_la-random.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-interface.lo `test -f 'interface.c' || echo './'`interface.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c interface.c -fPIC -DPIC -o .libs/pkcs11_la-interface.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c interface.c -o pkcs11_la-interface.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-tls.lo `test -f 'tls.c' || echo './'`tls.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c tls.c -fPIC -DPIC -o .libs/pkcs11_la-tls.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c tls.c -o pkcs11_la-tls.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-slot.lo `test -f 'slot.c' || echo './'`slot.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c slot.c -fPIC -DPIC -o .libs/pkcs11_la-slot.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c slot.c -o pkcs11_la-slot.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-session.lo `test -f 'session.c' || echo './'`session.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c session.c -fPIC -DPIC -o .libs/pkcs11_la-session.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c session.c -o pkcs11_la-session.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-store.lo `test -f 'store.c' || echo './'`store.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c store.c -fPIC -DPIC -o .libs/pkcs11_la-store.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c store.c -o pkcs11_la-store.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-objects.lo `test -f 'objects.c' || echo './'`objects.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c objects.c -fPIC -DPIC -o .libs/pkcs11_la-objects.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c objects.c -o pkcs11_la-objects.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-provider.lo `test -f 'provider.c' || echo './'`provider.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c provider.c -fPIC -DPIC -o .libs/pkcs11_la-provider.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c provider.c -o pkcs11_la-provider.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-signature.lo `test -f 'signature.c' || echo './'`signature.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c signature.c -fPIC -DPIC -o .libs/pkcs11_la-signature.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c signature.c -o pkcs11_la-signature.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pkcs11_la-util.lo `test -f 'util.c' || echo './'`util.c libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c util.c -fPIC -DPIC -o .libs/pkcs11_la-util.o libtool: compile: gcc -DHAVE_CONFIG_H -I. -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c util.c -o pkcs11_la-util.o >/dev/null 2>&1 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' /bin/sh ../libtool --tag=CC --mode=link gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -Wall -Werror -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -module -shared -shrext .so -avoid-version -export-symbols "./provider.exports" -Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o pkcs11.la -rpath /usr/lib64/ossl-modules pkcs11_la-asymmetric_cipher.lo pkcs11_la-debug.lo pkcs11_la-encoder.lo pkcs11_la-digests.lo pkcs11_la-exchange.lo pkcs11_la-kdf.lo pkcs11_la-keymgmt.lo pkcs11_la-interface.lo pkcs11_la-objects.lo pkcs11_la-provider.lo pkcs11_la-random.lo pkcs11_la-session.lo pkcs11_la-signature.lo pkcs11_la-slot.lo pkcs11_la-store.lo pkcs11_la-tls.lo pkcs11_la-util.lo -lcrypto libtool: link: echo "{ global:" > .libs/pkcs11.ver libtool: link: cat ./provider.exports | /usr/bin/sed -e "s/\(.*\)/\1;/" >> .libs/pkcs11.ver libtool: link: echo "local: *; };" >> .libs/pkcs11.ver libtool: link: gcc -shared -fPIC -DPIC .libs/pkcs11_la-asymmetric_cipher.o .libs/pkcs11_la-debug.o .libs/pkcs11_la-encoder.o .libs/pkcs11_la-digests.o .libs/pkcs11_la-exchange.o .libs/pkcs11_la-kdf.o .libs/pkcs11_la-keymgmt.o .libs/pkcs11_la-interface.o .libs/pkcs11_la-objects.o .libs/pkcs11_la-provider.o .libs/pkcs11_la-random.o .libs/pkcs11_la-session.o .libs/pkcs11_la-signature.o .libs/pkcs11_la-slot.o .libs/pkcs11_la-store.o .libs/pkcs11_la-tls.o .libs/pkcs11_la-util.o -lcrypto -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -O2 -flto=auto -g -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -Wl,-soname -Wl,pkcs11.so -Wl,-version-script -Wl,.libs/pkcs11.ver -o .libs/pkcs11.so libtool: link: ( cd ".libs" && rm -f "pkcs11.la" && ln -s "../pkcs11.la" "pkcs11.la" ) make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' Making all in tests make[1]: Nothing to be done for 'all'. Making all in docs make[1]: Nothing to be done for 'all'. make[1]: Nothing to be done for 'all-am'. + RPM_EC=0 ++ jobs -p + exit 0 Executing(%install): /bin/sh -e /var/tmp/rpm-tmp.Gxj58j + umask 022 + cd /builddir/build/BUILD + '[' /builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64 '!=' / ']' + rm -rf /builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64 ++ dirname /builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64 + mkdir -p /builddir/build/BUILDROOT + mkdir /builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64 + CFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer ' + export CFLAGS + CXXFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer ' + export CXXFLAGS + FFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -I/usr/lib64/gfortran/modules ' + export FFLAGS + FCFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -I/usr/lib64/gfortran/modules ' + export FCFLAGS + VALAFLAGS=-g + export VALAFLAGS + RUSTFLAGS='-Copt-level=3 -Cdebuginfo=2 -Ccodegen-units=1 -Cstrip=none -Cforce-frame-pointers=yes -Clink-arg=-Wl,-z,relro -Clink-arg=-Wl,-z,now -Clink-arg=-specs=/usr/lib/rpm/redhat/redhat-package-notes --cap-lints=warn' + export RUSTFLAGS + LDFLAGS='-Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes ' + export LDFLAGS + LT_SYS_LIBRARY_PATH=/usr/lib64: + export LT_SYS_LIBRARY_PATH + CC=gcc + export CC + CXX=g++ + export CXX + cd pkcs11-provider-0.2 + /usr/bin/make install DESTDIR=/builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64 'INSTALL=/usr/bin/install -p' Making install in src make[1]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[2]: Nothing to be done for 'install-exec-am'. /usr/bin/mkdir -p '/builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64/usr/lib64/ossl-modules' /bin/sh ../libtool --mode=install /usr/bin/install -p pkcs11.la '/builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64/usr/lib64/ossl-modules' libtool: install: /usr/bin/install -p .libs/pkcs11.so /builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64/usr/lib64/ossl-modules/pkcs11.so libtool: install: /usr/bin/install -p .libs/pkcs11.lai /builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64/usr/lib64/ossl-modules/pkcs11.la libtool: warning: remember to run 'libtool --finish /usr/lib64/ossl-modules' make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[1]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' Making install in tests make[1]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' make[2]: Nothing to be done for 'install-data-am'. make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' make[1]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' Making install in docs make[1]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/docs' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/docs' make[2]: Nothing to be done for 'install-exec-am'. /usr/bin/mkdir -p '/builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64/usr/share/man/man7' /usr/bin/install -p -m 644 provider-pkcs11.7 '/builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64/usr/share/man/man7' make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/docs' make[1]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/docs' make[1]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2' make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2' make[2]: Nothing to be done for 'install-exec-am'. /usr/bin/mkdir -p '/builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64/usr/share/doc/pkcs11-provider' /usr/bin/install -p -m 644 README.md '/builddir/build/BUILDROOT/pkcs11-provider-0.2-2.fc39.riscv64/usr/share/doc/pkcs11-provider' make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2' make[1]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2' + /usr/bin/find-debuginfo -j8 --strict-build-id -m -i --build-id-seed 0.2-2.fc39 --unique-debug-suffix -0.2-2.fc39.riscv64 --unique-debug-src-base pkcs11-provider-0.2-2.fc39.riscv64 --run-dwz --dwz-low-mem-die-limit 10000000 --dwz-max-die-limit 50000000 -S debugsourcefiles.list /builddir/build/BUILD/pkcs11-provider-0.2 find-debuginfo: starting Extracting debug info from 1 files DWARF-compressing 1 files sepdebugcrcfix: Updated 1 CRC32s, 0 CRC32s did match. Creating .debug symlinks for symlinks to ELF files Copying sources found by 'debugedit -l' to /usr/src/debug/pkcs11-provider-0.2-2.fc39.riscv64 1273 blocks find-debuginfo: done + /usr/lib/rpm/check-buildroot + /usr/lib/rpm/redhat/brp-ldconfig + /usr/lib/rpm/brp-compress + /usr/lib/rpm/redhat/brp-strip-lto /usr/bin/strip + /usr/lib/rpm/brp-strip-static-archive /usr/bin/strip + /usr/lib/rpm/check-rpaths + /usr/lib/rpm/redhat/brp-mangle-shebangs *** WARNING: ./usr/lib64/ossl-modules/pkcs11.la is executable but has no shebang, removing executable bit + /usr/lib/rpm/brp-remove-la-files + env /usr/lib/rpm/redhat/brp-python-bytecompile '' 1 0 -j8 + /usr/lib/rpm/redhat/brp-python-hardlink Executing(%check): /bin/sh -e /var/tmp/rpm-tmp.CdlNvV + umask 022 + cd /builddir/build/BUILD + CFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer ' + export CFLAGS + CXXFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer ' + export CXXFLAGS + FFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -I/usr/lib64/gfortran/modules ' + export FFLAGS + FCFLAGS='-O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -I/usr/lib64/gfortran/modules ' + export FCFLAGS + VALAFLAGS=-g + export VALAFLAGS + RUSTFLAGS='-Copt-level=3 -Cdebuginfo=2 -Ccodegen-units=1 -Cstrip=none -Cforce-frame-pointers=yes -Clink-arg=-Wl,-z,relro -Clink-arg=-Wl,-z,now -Clink-arg=-specs=/usr/lib/rpm/redhat/redhat-package-notes --cap-lints=warn' + export RUSTFLAGS + LDFLAGS='-Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes ' + export LDFLAGS + LT_SYS_LIBRARY_PATH=/usr/lib64: + export LT_SYS_LIBRARY_PATH + CC=gcc + export CC + CXX=g++ + export CXX + cd pkcs11-provider-0.2 + make check Making check in src make[1]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' make[1]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/src' Making check in tests make[1]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' make tsession tgenkey tlsctx tdigests treadkeys tfork pincache \ helpers.sh setup-softhsm.sh setup-softokn.sh softhsm-proxy.sh test-wrapper tbasic tcerts tecc tecdh tedwards tdemoca thkdf toaepsha2 trsapss tdigest ttls tpubkey tfork turi trand make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' gcc -DHAVE_CONFIG_H -I. -I../src -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o tsession-tsession.o `test -f 'tsession.c' || echo './'`tsession.c /bin/sh ../libtool --tag=CC --mode=link gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tsession tsession-tsession.o -lssl -lcrypto libtool: link: gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tsession tsession-tsession.o -lssl -lcrypto gcc -DHAVE_CONFIG_H -I. -I../src -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o tgenkey-tgenkey.o `test -f 'tgenkey.c' || echo './'`tgenkey.c /bin/sh ../libtool --tag=CC --mode=link gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tgenkey tgenkey-tgenkey.o -lssl -lcrypto libtool: link: gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tgenkey tgenkey-tgenkey.o -lssl -lcrypto gcc -DHAVE_CONFIG_H -I. -I../src -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o tlsctx-tlsctx.o `test -f 'tlsctx.c' || echo './'`tlsctx.c /bin/sh ../libtool --tag=CC --mode=link gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tlsctx tlsctx-tlsctx.o -lssl -lcrypto libtool: link: gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tlsctx tlsctx-tlsctx.o -lssl -lcrypto gcc -DHAVE_CONFIG_H -I. -I../src -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o tdigests-tdigests.o `test -f 'tdigests.c' || echo './'`tdigests.c /bin/sh ../libtool --tag=CC --mode=link gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tdigests tdigests-tdigests.o -lssl -lcrypto libtool: link: gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tdigests tdigests-tdigests.o -lssl -lcrypto gcc -DHAVE_CONFIG_H -I. -I../src -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o treadkeys-treadkeys.o `test -f 'treadkeys.c' || echo './'`treadkeys.c /bin/sh ../libtool --tag=CC --mode=link gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o treadkeys treadkeys-treadkeys.o -lssl -lcrypto libtool: link: gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o treadkeys treadkeys-treadkeys.o -lssl -lcrypto gcc -DHAVE_CONFIG_H -I. -I../src -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o tfork-tfork.o `test -f 'tfork.c' || echo './'`tfork.c /bin/sh ../libtool --tag=CC --mode=link gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tfork tfork-tfork.o -lssl -lcrypto libtool: link: gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o tfork tfork-tfork.o -lssl -lcrypto gcc -DHAVE_CONFIG_H -I. -I../src -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -c -o pincache-pincache.o `test -f 'pincache.c' || echo './'`pincache.c /bin/sh ../libtool --tag=CC --mode=link gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z,relro -Wl,--as-needed -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o pincache pincache-pincache.o -lssl -lcrypto libtool: link: gcc -Wall -Wextra -Wwrite-strings -Wpointer-arith -Wno-missing-field-initializers -Wformat -Wshadow -Wno-unused-parameter -Werror=implicit-function-declaration -Werror=missing-prototypes -Werror=format-security -Werror=parentheses -Werror=implicit -Werror=strict-prototypes -fno-strict-aliasing -fno-delete-null-pointer-checks -fdiagnostics-show-option -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-U_FORTIFY_SOURCE,-D_FORTIFY_SOURCE=3 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -fasynchronous-unwind-tables -fstack-clash-protection -fno-omit-frame-pointer -std=c11 -Wl,-z -Wl,relro -Wl,--as-needed -Wl,-z -Wl,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -Wl,--build-id=sha1 -specs=/usr/lib/rpm/redhat/redhat-package-notes -o pincache pincache-pincache.o -lssl -lcrypto make[2]: Nothing to be done for 'helpers.sh'. make[2]: Nothing to be done for 'setup-softhsm.sh'. make[2]: Nothing to be done for 'setup-softokn.sh'. make[2]: Nothing to be done for 'softhsm-proxy.sh'. make[2]: Nothing to be done for 'test-wrapper'. make[2]: Nothing to be done for 'tbasic'. make[2]: Nothing to be done for 'tcerts'. make[2]: Nothing to be done for 'tecc'. make[2]: Nothing to be done for 'tecdh'. make[2]: Nothing to be done for 'tedwards'. make[2]: Nothing to be done for 'tdemoca'. make[2]: Nothing to be done for 'thkdf'. make[2]: Nothing to be done for 'toaepsha2'. make[2]: Nothing to be done for 'trsapss'. make[2]: Nothing to be done for 'tdigest'. make[2]: Nothing to be done for 'ttls'. make[2]: Nothing to be done for 'tpubkey'. make[2]: 'tfork' is up to date. make[2]: Nothing to be done for 'turi'. make[2]: Nothing to be done for 'trand'. make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' make check-TESTS make[2]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' make[3]: Entering directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' LIBSPATH=/builddir/build/BUILD/pkcs11-provider-0.2/src/.libs \ TESTSSRCDIR=/builddir/build/BUILD/pkcs11-provider-0.2/tests \ TESTBLDDIR=/builddir/build/BUILD/pkcs11-provider-0.2/tests \ SHARED_EXT=.so \ SOFTOKNPATH="/usr/lib64/" \ /builddir/build/BUILD/pkcs11-provider-0.2/tests/setup-softokn.sh > setup-softokn.log 2>&1 LIBSPATH=/builddir/build/BUILD/pkcs11-provider-0.2/src/.libs \ TESTSSRCDIR=/builddir/build/BUILD/pkcs11-provider-0.2/tests \ TESTBLDDIR=/builddir/build/BUILD/pkcs11-provider-0.2/tests \ SHARED_EXT=.so \ P11KITCLIENTPATH="/usr/lib64/pkcs11/p11-kit-client.so" \ /builddir/build/BUILD/pkcs11-provider-0.2/tests/setup-softhsm.sh > setup-softhsm.log 2>&1 FAIL: basic-softokn.t FAIL: basic-softhsm.t PASS: pubkey-softokn.t PASS: pubkey-softhsm.t PASS: certs-softokn.t PASS: certs-softhsm.t PASS: ecc-softokn.t PASS: ecc-softhsm.t PASS: edwards-softhsm.t PASS: ecdh-softokn.t PASS: democa-softokn.t PASS: democa-softhsm.t PASS: digest-softokn.t PASS: digest-softhsm.t PASS: fork-softokn.t PASS: fork-softhsm.t PASS: oaepsha2-softokn.t PASS: hkdf-softokn.t PASS: rsapss-softokn.t PASS: genkey-softokn.t PASS: genkey-softhsm.t PASS: session-softokn.t PASS: session-softhsm.t PASS: rand-softokn.t PASS: rand-softhsm.t PASS: readkeys-softokn.t PASS: readkeys-softhsm.t FAIL: tls-softokn.t FAIL: tls-softhsm.t PASS: uri-softokn.t PASS: uri-softhsm.t ============================================================================ Testsuite summary for pkcs11-provider 0.2 ============================================================================ # TOTAL: 31 # PASS: 27 # SKIP: 0 # XFAIL: 0 # FAIL: 4 # XPASS: 0 # ERROR: 0 ============================================================================ See tests/test-suite.log Please report to simo@redhat.com ============================================================================ make[3]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' make[3]: *** [Makefile:1004: test-suite.log] Error 1 make[2]: *** [Makefile:1112: check-TESTS] Error 2 make[2]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' make[1]: *** [Makefile:1178: check-am] Error 2 make[1]: Leaving directory '/builddir/build/BUILD/pkcs11-provider-0.2/tests' make: *** [Makefile:476: check-recursive] Error 1 + '[' 2 -ne 0 ']' + cat tests/basic-softhsm.log tests/basic-softokn.log tests/certs-softhsm.log tests/certs-softokn.log tests/democa-softhsm.log tests/democa-softokn.log tests/digest-softhsm.log tests/digest-softokn.log tests/ecc-softhsm.log tests/ecc-softokn.log tests/ecdh-softokn.log tests/edwards-softhsm.log tests/fork-softhsm.log tests/fork-softokn.log tests/genkey-softhsm.log tests/genkey-softokn.log tests/hkdf-softokn.log tests/oaepsha2-softokn.log tests/pubkey-softhsm.log tests/pubkey-softokn.log tests/rand-softhsm.log tests/rand-softokn.log tests/readkeys-softhsm.log tests/readkeys-softokn.log tests/rsapss-softokn.log tests/session-softhsm.log tests/session-softokn.log tests/setup-softhsm.log tests/setup-softokn.log tests/test-suite.log tests/tls-softhsm.log tests/tls-softokn.log tests/uri-softhsm.log tests/uri-softokn.log Executing ./tbasic ## Raw Sign check error openssl pkeyutl -sign -inkey "${BASEURI}" -pkeyopt pad-mode:none -in ${TMPPDIR}/64Brandom.bin -out ${TMPPDIR}/raw-sig.bin Public Key operation error 20643880FFFFFF00:error:0200007A:rsa routines:p11prov_sig_operate:data too small for key size:signature.c:874: ## Sign and Verify with provided Hash and RSA openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${PRIURI}" -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-sig.bin openssl pkeyutl -verify -inkey "${PUBURI}" -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-sig.bin Signature Verified Successfully ## Sign and Verify with provided Hash and RSA with DigestInfo struct openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${PRIURI}" -pkeyopt digest:sha256 -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-sig.bin openssl pkeyutl -verify -inkey "${PUBURI}" -pkeyopt digest:sha256 -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-sig.bin Signature Verified Successfully ## DigestSign and DigestVerify with RSA openssl pkeyutl -sign -inkey "${BASEURI}" -digest sha256 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha256-dgstsig.bin openssl pkeyutl -verify -inkey "${BASEURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully openssl pkeyutl -verify -inkey "${PUBURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully RSA basic encrypt and decrypt openssl pkeyutl -encrypt -inkey "${PUBURI}" -pubin -in ${SECRETFILE} -out ${SECRETFILE}.enc openssl pkeyutl -decrypt -inkey "${PRIURI}" -in ${SECRETFILE}.enc -out ${SECRETFILE}.dec ## Test Disallow Public Export openssl pkey -in $PUBURI -pubin -pubout -text ## Test CSR generation from RSA private keys openssl req -new -batch -key "${PRIURI}" -out ${TMPPDIR}/rsa_csr.pem openssl req -in ${TMPPDIR}/rsa_csr.pem -verify -noout Certificate request self-signature verify OK ## Test fetching public keys without PIN in config files openssl pkey -in $PUBURI -pubin -pubout -out ${TMPPDIR}/rsa.pub.nopin.pem openssl pkey -in $ECPUBURI -pubin -pubout -out ${TMPPDIR}/ec.pub.nopin.pem ## Test fetching public keys with a PIN in URI openssl pkey -in $BASEURIWITHPIN -pubin -pubout -out ${TMPPDIR}/rsa.pub.uripin.pem openssl pkey -in $ECBASEURIWITHPIN -pubin -pubout -out ${TMPPDIR}/ec.pub.uripin.pem ## Test prompting without PIN in config files Failed to get expected command output Original command output: Enter pass phrase for PKCS#11 Token (Slot 2079782960 - SoftHSM slot ID 0x7bf6f830): PKCS11 RSA Private Key (2048 bits) [Can't export and print private key data] URI pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=bfd637d8fbf6f830;token=token_name;id=%00%01;object=testCert;type=private FAIL basic-softhsm.t (exit status: 1) Executing ./tbasic ## Raw Sign check error openssl pkeyutl -sign -inkey "${BASEURI}" -pkeyopt pad-mode:none -in ${TMPPDIR}/64Brandom.bin -out ${TMPPDIR}/raw-sig.bin Public Key operation error 20F4ACABFFFFFF00:error:0200007A:rsa routines:p11prov_sig_operate:data too small for key size:signature.c:874: ## Sign and Verify with provided Hash and RSA openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${PRIURI}" -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-sig.bin openssl pkeyutl -verify -inkey "${PUBURI}" -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-sig.bin Signature Verified Successfully ## Sign and Verify with provided Hash and RSA with DigestInfo struct openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${PRIURI}" -pkeyopt digest:sha256 -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-sig.bin openssl pkeyutl -verify -inkey "${PUBURI}" -pkeyopt digest:sha256 -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-sig.bin Signature Verified Successfully ## DigestSign and DigestVerify with RSA openssl pkeyutl -sign -inkey "${BASEURI}" -digest sha256 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha256-dgstsig.bin openssl pkeyutl -verify -inkey "${BASEURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully openssl pkeyutl -verify -inkey "${PUBURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully RSA basic encrypt and decrypt openssl pkeyutl -encrypt -inkey "${PUBURI}" -pubin -in ${SECRETFILE} -out ${SECRETFILE}.enc openssl pkeyutl -decrypt -inkey "${PRIURI}" -in ${SECRETFILE}.enc -out ${SECRETFILE}.dec ## Test Disallow Public Export openssl pkey -in $PUBURI -pubin -pubout -text ## Test CSR generation from RSA private keys openssl req -new -batch -key "${PRIURI}" -out ${TMPPDIR}/rsa_csr.pem openssl req -in ${TMPPDIR}/rsa_csr.pem -verify -noout Certificate request self-signature verify OK ## Test fetching public keys without PIN in config files openssl pkey -in $PUBURI -pubin -pubout -out ${TMPPDIR}/rsa.pub.nopin.pem openssl pkey -in $ECPUBURI -pubin -pubout -out ${TMPPDIR}/ec.pub.nopin.pem ## Test fetching public keys with a PIN in URI openssl pkey -in $BASEURIWITHPIN -pubin -pubout -out ${TMPPDIR}/rsa.pub.uripin.pem openssl pkey -in $ECBASEURIWITHPIN -pubin -pubout -out ${TMPPDIR}/ec.pub.uripin.pem ## Test prompting without PIN in config files Failed to get expected command output Original command output: Enter pass phrase for PKCS#11 Token (Slot 1 - NSS Internal Cryptographic Services): PKCS11 RSA Private Key (2048 bits) [Can't export and print private key data] URI pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%12%B4%FF%27%41%E4%0C%9F%92%2A%28%D6%12%E4%06%82%77%40%01%EB;type=private FAIL basic-softokn.t (exit status: 1) Executing ./tcerts ## Check we can fetch certifiatce objects openssl x509 -in ${CRTURI} -subject -out ${TMPPDIR}/crt-subj.txt openssl x509 -in ${ECCRTURI} -subject -out ${TMPPDIR}/eccrt-subj.txt ## Use storeutl command to match specific certs via params openssl storeutl -certs -subject "${subj}" -out ${TMPPDIR}/storeutl-crt-subj.txt pkcs11:type=cert 0: Certificate openssl storeutl -certs -subject "${subj}" -out ${TMPPDIR}/storeutl-crt-subj.txt pkcs11:type=cert 0: Certificate openssl storeutl -certs -subject "${subj}" -out ${TMPPDIR}/storeutl-crt-subj.txt pkcs11:type=cert 0: Certificate openssl storeutl -certs -subject "${subj}" -out ${TMPPDIR}/storeutl-crt-subj.txt pkcs11:type=cert 0: Certificate PASS certs-softhsm.t (exit status: 0) Executing ./tcerts ## Check we can fetch certifiatce objects openssl x509 -in ${CRTURI} -subject -out ${TMPPDIR}/crt-subj.txt openssl x509 -in ${ECCRTURI} -subject -out ${TMPPDIR}/eccrt-subj.txt ## Use storeutl command to match specific certs via params openssl storeutl -certs -subject "${subj}" -out ${TMPPDIR}/storeutl-crt-subj.txt pkcs11:type=cert 0: Certificate openssl storeutl -certs -subject "${subj}" -out ${TMPPDIR}/storeutl-crt-subj.txt pkcs11:type=cert 0: Certificate openssl storeutl -certs -subject "${subj}" -out ${TMPPDIR}/storeutl-crt-subj.txt pkcs11:type=cert 0: Certificate openssl storeutl -certs -subject "${subj}" -out ${TMPPDIR}/storeutl-crt-subj.txt pkcs11:type=cert 0: Certificate PASS certs-softokn.t (exit status: 0) Executing ./tdemoca ## Set up demoCA ## Generating CA cert if needed openssl req -batch -noenc -x509 -new -key ${PRIURI} -out ${DEMOCA}/cacert.pem ## Generating a new CSR openssl req -batch -noenc -newkey rsa:2048 -subj "/CN=testing-csr-signing/O=PKCS11 Provider/C=US" -keyout ${DEMOCA}/cert.key -out ${DEMOCA}/cert.csr ............+++++++++++++++++++++++++++++++++++++++*..+++++++++++++++++++++++++++++++++++++++*.+...+...+..+.......+.................+...+......+.+...+..+......+....+......+...+..+.......+...+.........+..............+.+......+..+.+......+...+..+...+.......+...........+...+.+...+...+..................+..+..........+..............+...+.+...............+..+...+.+........+.+...........+......+......................+...........+.......+.....+....+........+...+.......+...+...+..+....+.....+.+...+...............+.........+.....+......+....+...+...+.....+............+.......+..+...+.+.....+.........+......+.+......+...............+..+...+....+......+..+...+...+.+.....+.........+......+....+......+.....+.............+...+..+......+....+..+.+..............+...+.......+...+..+.........+..........+..+...................+...+...........+.+........+...+...+.+.....+.........................+......+.....+......................+........+.........+...+...+....+...+...+............+.....+......+......+.+...+..+.......+...+..+...+..........+..............+...+............+......+....+...+.....+.+..+...+..........+...............+...........+......+....+...+..+.............+.....+..........+..+......+...++++++ ........+.+++++++++++++++++++++++++++++++++++++++*...+....+++++++++++++++++++++++++++++++++++++++*.....+.+...+.....+.......+...+.....+.+......+.....+.......+..+.+........+.........+.+..............+..........+...+.....+.............+......+.....+.+..+.+.....+.+...+..+.+.........+.....+............................+.....+...+...+.........+..........+...+....................+...+.+...+...+.....+...+.+......+...............+.........+.....+...+.+..+....+...+............+......+..+.+.....+...............+.+...+........+...+......+....+..+.......+..+.+..............+......+...+.+........+.+.....++++++ ----- ## Signing the new certificate openssl ca -batch -in ${DEMOCA}/cert.csr -keyfile ${PRIURI} -out ${DEMOCA}/cert.pem Using configuration from /builddir/build/BUILD/pkcs11-provider-0.2/tests/tmp.softhsm/openssl.cnf Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows commonName :ASN.1 12:'testing-csr-signing' organizationName :ASN.1 12:'PKCS11 Provider' countryName :PRINTABLE:'US' Certificate is to be certified until Nov 29 06:18:00 2024 GMT (365 days) 20C4E58FFFFFFF00:error:40800054:pkcs11:p11prov_GetOperationState:reason(84):interface.gen.c:279:Error returned by C_GetOperationState Write out database with 1 new entries Database updated ## Set up OCSP openssl req -batch -noenc -new -subj "/CN=OCSP/O=PKCS11 Provider/C=US" -key ${PRIURI} -out ${DEMOCA}/ocspSigning.csr openssl ca -batch -keyfile ${PRIURI} -cert ${DEMOCA}/cacert.pem -in ${DEMOCA}/ocspSigning.csr -out ${DEMOCA}/ocspSigning.pem Using configuration from /builddir/build/BUILD/pkcs11-provider-0.2/tests/tmp.softhsm/openssl.cnf Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows commonName :ASN.1 12:'OCSP' organizationName :ASN.1 12:'PKCS11 Provider' countryName :PRINTABLE:'US' Certificate is to be certified until Nov 29 06:18:03 2024 GMT (365 days) 20442594FFFFFF00:error:40800054:pkcs11:p11prov_GetOperationState:reason(84):interface.gen.c:279:Error returned by C_GetOperationState Write out database with 1 new entries Database updated ## Run OCSP ACCEPT 0.0.0.0:12345 PID=795196 openssl ocsp -CAfile ${DEMOCA}/cacert.pem -issuer ${DEMOCA}/cacert.pem -cert ${DEMOCA}/cert.pem -resp_text -noverify -url http://127.0.0.1:${PORT} ocsp: waiting for OCSP client connections... ocsp: Received request, 1st line: POST / HTTP/1.0 OCSP Request Data: Version: 1 (0x0) Requestor List: Certificate ID: Hash Algorithm: sha1 Issuer Name Hash: 810C6D581B88B8245F66B67E49B738D99BD5F7BB Issuer Key Hash: 4075754B031731634A50CABDC7C4076C4BD2BA7D Serial Number: 01 Request Extensions: OCSP Nonce: 0410F767469EC4594E9B36A9741DD9FDBA88 OCSP Response Data: OCSP Response Status: successful (0x0) Response Type: Basic OCSP Response Version: 1 (0x0) Responder Id: C = US, O = PKCS11 Provider, CN = OCSP Produced At: Nov 30 06:18:04 2023 GMT Responses: Certificate ID: Hash Algorithm: sha1 Issuer Name Hash: 810C6D581B88B8245F66B67E49B738D99BD5F7BB Issuer Key Hash: 4075754B031731634A50CABDC7C4076C4BD2BA7D Serial Number: 01 Cert Status: good This Update: Nov 30 06:18:04 2023 GMT Response Extensions: OCSP Nonce: 0410F767469EC4594E9B36A9741DD9FDBA88 Signature Algorithm: sha1WithRSAEncryption Signature Value: 3c:d8:84:59:76:a5:6f:1b:16:42:10:b8:25:cd:b8:3e:d4:e7: a9:18:cc:36:3c:23:99:31:2b:30:77:67:74:3e:72:0a:f5:58: 5d:3a:b4:51:45:9a:ad:c6:a7:13:be:88:cc:b6:7a:0c:d9:3a: 87:86:8e:ca:e7:04:bb:1c:21:8e:63:fb:f1:dd:be:15:e3:33: b5:74:3f:1b:6e:5d:06:98:41:0a:ae:f5:37:8b:62:b0:ff:3a: 5e:bf:98:a4:5f:e8:31:eb:3b:d3:03:d3:16:59:d8:74:80:cd: 2e:fd:76:d1:32:6f:9f:53:cd:99:a9:95:91:44:03:3a:b9:87: d3:fa:e4:a8:a1:e9:5b:70:41:e2:18:44:18:c9:fe:da:32:dd: 7c:b5:c9:7b:d4:f4:b9:5f:22:8f:2f:b9:7b:9b:e7:a1:53:c5: df:49:0f:79:8e:cd:27:76:a6:71:0f:11:2f:e1:1e:6d:b5:7e: 70:8f:95:4b:17:70:61:1b:50:77:c6:79:32:a7:ae:cf:0c:75: 9a:f8:da:91:64:ba:51:d5:e8:bd:02:86:1f:54:91:2b:46:12: 8c:48:b3:bd:25:23:80:ed:b4:4b:9e:3e:f4:3c:43:49:4b:7b: 2f:68:72:38:ea:53:46:11:4f:35:dc:58:44:0f:ec:7b:b0:89: e9:a1:42:25 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, ST=New York, L=New York, O=PKCS11 Provider, OU=Testing Harness Validity Not Before: Nov 30 06:18:03 2023 GMT Not After : Nov 29 06:18:03 2024 GMT Subject: C=US, O=PKCS11 Provider, CN=OCSP Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:ce:db:fb:1a:b6:28:f8:db:69:7c:9d:f9:8a:88: 57:bf:92:ae:b2:99:2f:3d:ea:be:f0:ce:4b:0c:a3: 50:c4:46:1a:60:26:0e:f0:5e:9b:3e:56:ed:f4:9b: e0:02:1f:dc:62:32:a1:34:26:13:1a:4c:8b:45:8e: c0:9b:2c:5d:6f:22:8b:ef:c1:88:cc:f2:d6:2e:0f: 42:aa:19:f9:15:5f:6f:50:01:85:84:a5:58:e5:2d: 6d:2b:1b:c1:e1:ce:12:81:e9:a9:01:93:f8:52:a1: 62:8d:01:d7:9f:47:be:32:5d:66:b5:03:b6:01:cb: e9:31:d8:2b:39:48:d1:a5:96:71:e0:5e:ce:e1:07: f2:d7:2c:6d:05:df:7d:5a:07:af:2e:b7:3d:2f:32: db:dd:37:31:2f:63:e1:3f:9e:7f:13:4a:db:f7:a8: 3a:f5:e4:f2:3a:91:5c:a4:70:bd:15:d5:51:80:16: 60:4b:41:2a:c7:9a:6c:48:ea:f4:42:ef:49:ad:ed: af:b7:7d:1e:3f:8a:91:27:13:a6:ee:4e:ca:df:69: 66:25:72:93:db:d6:75:2c:a1:30:fa:66:e3:e9:23: 3b:17:71:b7:00:cd:e8:04:f8:08:8d:24:0f:ab:8e: f4:81:de:6e:4c:ec:ed:fa:2c:34:26:ee:6f:b8:63: 76:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: CA:FALSE X509v3 Key Usage: Digital Signature, Non Repudiation, Key Encipherment X509v3 Subject Key Identifier: 40:75:75:4B:03:17:31:63:4A:50:CA:BD:C7:C4:07:6C:4B:D2:BA:7D X509v3 Authority Key Identifier: 40:75:75:4B:03:17:31:63:4A:50:CA:BD:C7:C4:07:6C:4B:D2:BA:7D S ## Kill any remaining children and wait for them ./tdemoca: line 76: 795196 Killed $CHECKER openssl ocsp -index "${DEMOCA}/index.txt" -rsigner "${DEMOCA}/ocspSigning.pem" -rkey "${PRIURI}" -CA "${DEMOCA}/cacert.pem" -rmd sha1 -port "${PORT}" -text PASS democa-softhsm.t (exit status: 0) Executing ./tdemoca ## Set up demoCA ## Generating CA cert if needed openssl req -batch -noenc -x509 -new -key ${PRIURI} -out ${DEMOCA}/cacert.pem ## Generating a new CSR openssl req -batch -noenc -newkey rsa:2048 -subj "/CN=testing-csr-signing/O=PKCS11 Provider/C=US" -keyout ${DEMOCA}/cert.key -out ${DEMOCA}/cert.csr .+...+.......+...+...........+.........+++++++++++++++++++++++++++++++++++++++*........+...+...+...........+++++++++++++++++++++++++++++++++++++++*.+.....+......+......+....+...........+...+.......+...+.....+..........+........+...+.+.....+....+.....+.......+..+...+...+.......+..+.......+...+..+.+.....+..........+..+.+......+...+.....+.+.....+....+......+..+.............+.....+.+.....+.........+....+...+........+..........+.....+.......+.........+...+...........+.......+...+.........+.....+.......+.....+.............++++++ ...+......+++++++++++++++++++++++++++++++++++++++*.....+...+..+...+.............+..+...+....+......+.................+.............+++++++++++++++++++++++++++++++++++++++*...+..........+..+.+..............+...+......................+...+.....+...+.......+......+.....+.+......+..+...+.......+...+..+...+....+....................+.+..+..........+......+..+..................+....+...........+.+........+..................+....+...+......+.....+......+...+...+.............+.....+....+...........+.+..............+.........+.+......+...+........+....+..................+..+.+...+......+...+..+...+.+..+...+.+.....................+..+............+...+...+.........+.+..+.......+..............+.........+.+.................+....+.........+.........+..+.+...+...........+...+......+......+.+.....+...+..........+.....................+...+..+...+.+.....+.......+.....+............+......+.+......+...+......+...+..+.+..+.......+...+..+....+..+...+....+...+...+..+............+.+.........+........++++++ ----- ## Signing the new certificate openssl ca -batch -in ${DEMOCA}/cert.csr -keyfile ${PRIURI} -out ${DEMOCA}/cert.pem Using configuration from /builddir/build/BUILD/pkcs11-provider-0.2/tests/tmp.softokn/openssl.cnf Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows commonName :ASN.1 12:'testing-csr-signing' organizationName :ASN.1 12:'PKCS11 Provider' countryName :PRINTABLE:'US' Certificate is to be certified until Nov 29 06:17:38 2024 GMT (365 days) 20E47B94FFFFFF00:error:40800091:pkcs11:p11prov_GetOperationState:There is no active operation of appropriate type in the specified session:interface.gen.c:279:Error returned by C_GetOperationState Write out database with 1 new entries Database updated ## Set up OCSP openssl req -batch -noenc -new -subj "/CN=OCSP/O=PKCS11 Provider/C=US" -key ${PRIURI} -out ${DEMOCA}/ocspSigning.csr openssl ca -batch -keyfile ${PRIURI} -cert ${DEMOCA}/cacert.pem -in ${DEMOCA}/ocspSigning.csr -out ${DEMOCA}/ocspSigning.pem Using configuration from /builddir/build/BUILD/pkcs11-provider-0.2/tests/tmp.softokn/openssl.cnf Check that the request matches the signature Signature ok The Subject's Distinguished Name is as follows commonName :ASN.1 12:'OCSP' organizationName :ASN.1 12:'PKCS11 Provider' countryName :PRINTABLE:'US' Certificate is to be certified until Nov 29 06:17:45 2024 GMT (365 days) 20D43BB5FFFFFF00:error:40800091:pkcs11:p11prov_GetOperationState:There is no active operation of appropriate type in the specified session:interface.gen.c:279:Error returned by C_GetOperationState Write out database with 1 new entries Database updated ## Run OCSP ACCEPT 0.0.0.0:12345 PID=795160 openssl ocsp -CAfile ${DEMOCA}/cacert.pem -issuer ${DEMOCA}/cacert.pem -cert ${DEMOCA}/cert.pem -resp_text -noverify -url http://127.0.0.1:${PORT} ocsp: waiting for OCSP client connections... ocsp: Received request, 1st line: POST / HTTP/1.0 OCSP Request Data: Version: 1 (0x0) Requestor List: Certificate ID: Hash Algorithm: sha1 Issuer Name Hash: 810C6D581B88B8245F66B67E49B738D99BD5F7BB Issuer Key Hash: E2D44785B0BBED76666C445C6C52985EF0C9DBDA Serial Number: 01 Request Extensions: OCSP Nonce: 041056C98AAD361337F5CC405430690AE22C OCSP Response Data: OCSP Response Status: successful (0x0) Response Type: Basic OCSP Response Version: 1 (0x0) Responder Id: C = US, O = PKCS11 Provider, CN = OCSP Produced At: Nov 30 06:17:49 2023 GMT Responses: Certificate ID: Hash Algorithm: sha1 Issuer Name Hash: 810C6D581B88B8245F66B67E49B738D99BD5F7BB Issuer Key Hash: E2D44785B0BBED76666C445C6C52985EF0C9DBDA Serial Number: 01 Cert Status: good This Update: Nov 30 06:17:49 2023 GMT Response Extensions: OCSP Nonce: 041056C98AAD361337F5CC405430690AE22C Signature Algorithm: sha1WithRSAEncryption Signature Value: 46:8d:70:89:a4:62:cd:81:b2:9b:85:0c:d8:ad:5f:1b:b1:bc: 5e:21:6b:85:89:3e:07:75:9f:b1:3d:6e:8b:92:42:75:5c:5e: d1:82:59:e6:60:2d:11:96:3f:45:5f:18:4a:36:c6:45:14:88: f2:b1:1c:c3:bf:52:70:90:e2:4a:d8:21:3a:74:af:15:b5:49: 7f:c1:f6:34:df:32:74:dc:73:20:07:89:de:ab:74:9a:d9:7e: 6b:25:ba:01:ec:89:82:57:19:c8:f0:44:cf:ce:26:7f:a9:04: 0c:e4:bd:8b:37:f2:f5:3f:07:a0:33:c8:bd:4c:a0:75:ce:d2: ec:90:df:8e:a3:9d:e9:6a:cf:5f:17:5b:57:b1:66:ea:70:bd: 23:1e:f2:44:49:83:d2:2d:76:51:15:e5:68:a4:bb:db:75:5f: c3:c4:63:84:aa:b5:e8:be:f5:37:8c:63:df:c0:77:d4:2a:3e: 8f:d6:38:20:74:32:59:35:04:cb:8f:7a:67:d1:16:ed:fe:24: 18:d6:fc:bf:93:74:a9:42:bd:82:75:5f:3e:b8:f9:e9:21:81: b9:71:b3:2e:21:a3:7b:f4:29:de:02:11:0e:4b:b5:12:ef:f1: ae:70:5c:36:0e:81:bb:9f:3b:18:c3:f1:7c:d9:f7:8a:e9:1a: de:0e:ca:d3 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, ST=New York, L=New York, O=PKCS11 Provider, OU=Testing Harness Validity Not Before: Nov 30 06:17:45 2023 GMT Not After : Nov 29 06:17:45 2024 GMT Subject: C=US, O=PKCS11 Provider, CN=OCSP Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:b2:23:c7:73:93:dd:71:36:f6:37:31:a6:14:0f: ba:9c:ef:70:0b:ad:eb:72:d8:6c:7b:7e:17:21:ed: 8b:90:28:35:12:19:28:e7:9a:75:43:d9:86:f7:2f: 57:df:ca:5f:01:29:20:c1:ea:f1:78:1f:ae:e5:12: c8:85:59:3b:62:85:85:fa:74:1b:6a:53:4d:fb:6e: 09:bc:c1:90:de:98:97:cc:9a:9a:6e:b2:82:42:83: ce:49:74:5d:72:c2:78:87:1a:24:36:60:5d:b3:ae: a6:7e:99:16:44:b7:4c:cc:7b:01:d8:73:bc:9b:41: 6f:0a:72:4d:bb:55:0b:df:39:e3:2f:f8:46:1e:21: 79:e1:f4:26:a7:e0:8b:bb:f1:3f:87:a5:a8:16:5e: 14:3a:e6:3a:71:eb:f1:ff:f7:85:da:17:9a:01:a8: f2:f9:72:45:80:97:15:ab:0e:d3:66:53:bf:87:90: d4:a5:d2:4c:cc:82:74:c3:5e:61:01:60:57:88:c6: aa:2e:e7:ca:74:b0:c0:de:73:46:24:a2:ea:b1:57: d0:3e:46:07:da:56:7b:15:16:1d:8d:f4:5e:ac:fb: a5:43:f6:ec:51:07:4f:75:ce:1b:11:b5:78:69:f9: 63:ad:86:e5:09:72:0b:22:38:27:c5:c2:da:fb:62: 33:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: CA:FALSE X509v3 Key Usage: Digital Signature, Non Repudiation, Key Encipherment X509v3 Subject Key Identifier: E2:D4:47:85:B0:BB:ED:76:66:6C:44:5C:6C:52:98:5E:F0:C9:DB:DA X509v3 Authority Key Identifier: E2:D4:47:85:B0:BB:ED:76:66:6C:44:5C:6C:52:98:5E:F0:C9:DB:DA S ## Kill any remaining children and wait for them /builddir/build/BUILD/pkcs11-provider-0.2/tests/helpers.sh: line 66: 795160 Killed $CHECKER openssl ocsp -index "${DEMOCA}/index.txt" -rsigner "${DEMOCA}/ocspSigning.pem" -rkey "${PRIURI}" -CA "${DEMOCA}/cacert.pem" -rmd sha1 -port "${PORT}" -text PASS democa-softokn.t (exit status: 0) Executing ./tdigest ## Test Digests support sha512-224: Unsupported by pkcs11 token sha512-256: Unsupported by pkcs11 token sha3-224: Unsupported by pkcs11 token sha3-256: Unsupported by pkcs11 token sha3-384: Unsupported by pkcs11 token sha3-512: Unsupported by pkcs11 token PASS digest-softhsm.t (exit status: 0) Executing ./tdigest ## Test Digests support sha512-224: Unsupported by pkcs11 token sha512-256: Unsupported by pkcs11 token PASS digest-softokn.t (exit status: 0) Executing ./tecc ## Export EC Public key to a file openssl pkey -in $ECPUBURI -pubin -pubout -out ${TMPPDIR}/ecout.pub Print EC Public key from private openssl pkey -in $ECPRIURI -pubout -text ## Sign and Verify with provided Hash and EC openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${ECBASEURI}" -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-ecsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-ecsig.bin Signature Verified Successfully openssl pkeyutl -verify -inkey "${TMPPDIR}/ecout.pub" -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-ecsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA-256) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha256 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha256-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA-384) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha384 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha384-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha384 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha384-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA-512) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha512 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha512-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha512 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha512-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA3-256) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha3-256 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha3-256-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha3-256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha3-256-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA3-384) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha3-384 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha3-384-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha3-384 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha3-384-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA3-512) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha3-512 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha3-512-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha3-512 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha3-512-ecdgstsig.bin Signature Verified Successfully ## Test CSR generation from private ECC keys openssl req -new -batch -key "${ECPRIURI}" -out ${TMPPDIR}/ecdsa_csr.pem openssl req -in ${TMPPDIR}/ecdsa_csr.pem -verify -noout Certificate request self-signature verify OK PASS ecc-softhsm.t (exit status: 0) Executing ./tecc ## Export EC Public key to a file openssl pkey -in $ECPUBURI -pubin -pubout -out ${TMPPDIR}/ecout.pub Print EC Public key from private openssl pkey -in $ECPRIURI -pubout -text ## Sign and Verify with provided Hash and EC openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${ECBASEURI}" -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-ecsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-ecsig.bin Signature Verified Successfully openssl pkeyutl -verify -inkey "${TMPPDIR}/ecout.pub" -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-ecsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA-256) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha256 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha256-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA-384) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha384 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha384-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha384 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha384-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA-512) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha512 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha512-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha512 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha512-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA3-256) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha3-256 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha3-256-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha3-256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha3-256-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA3-384) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha3-384 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha3-384-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha3-384 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha3-384-ecdgstsig.bin Signature Verified Successfully ## DigestSign and DigestVerify with ECC (SHA3-512) openssl pkeyutl -sign -inkey "${ECBASEURI}" -digest sha3-512 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha3-512-ecdgstsig.bin openssl pkeyutl -verify -inkey "${ECBASEURI}" -pubin -digest sha3-512 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha3-512-ecdgstsig.bin Signature Verified Successfully ## Test CSR generation from private ECC keys openssl req -new -batch -key "${ECPRIURI}" -out ${TMPPDIR}/ecdsa_csr.pem openssl req -in ${TMPPDIR}/ecdsa_csr.pem -verify -noout Certificate request self-signature verify OK PASS ecc-softokn.t (exit status: 0) Executing ./tecdh ## ECDH Exchange openssl pkeyutl -derive -inkey ${ECBASEURI} -peerkey ${ECPEERPUBURI} -out ${TMPPDIR}/secret.ecdh.bin PASS ecdh-softokn.t (exit status: 0) Executing ./tedwards ## Export ED25519 Public key to a file openssl pkey -in $EDPUBURI -pubin -pubout -out ${TMPPDIR}/edout.pub Print ED25519 Public key from private openssl pkey -in $EDPRIURI -pubout -text ## DigestSign and DigestVerify with ED25519 openssl pkeyutl -sign -inkey "${EDBASEURI}" -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha256-eddgstsig.bin openssl pkeyutl -verify -inkey "${EDBASEURI}" -pubin -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-eddgstsig.bin Signature Verified Successfully ## Test CSR generation from private ED25519 keys openssl req -new -batch -key "${EDPRIURI}" -out ${TMPPDIR}/ed25519_csr.pem openssl req -in ${TMPPDIR}/ed25519_csr.pem -verify -noout Certificate request self-signature verify OK PASS edwards-softhsm.t (exit status: 0) Executing ./tfork Child Done Child Done ALL A-OK! PASS fork-softhsm.t (exit status: 0) Executing ./tfork Child Done Child Done ALL A-OK! PASS fork-softokn.t (exit status: 0) Executing ./tgenkey ALL A-OK!PASS genkey-softhsm.t (exit status: 0) Executing ./tgenkey ALL A-OK!PASS genkey-softokn.t (exit status: 0) Executing ./thkdf ## HKDF Derivation openssl pkeyutl -derive -kdf HKDF -kdflen 48 -pkeyopt md:SHA256 -pkeyopt mode:EXTRACT_AND_EXPAND -pkeyopt hexkey:${HKDF_HEX_SECRET} -pkeyopt hexsalt:${HKDF_HEX_SALT} -pkeyopt hexinfo:${HKDF_HEX_INFO} -out ${TMPPDIR}/hkdf1-out-pkcs11.bin -propquery provider=pkcs11 openssl pkeyutl -derive -kdf HKDF -kdflen 48 -pkeyopt md:SHA256 -pkeyopt mode:EXTRACT_AND_EXPAND -pkeyopt hexkey:${HKDF_HEX_SECRET} -pkeyopt hexsalt:${HKDF_HEX_SALT} -pkeyopt hexinfo:${HKDF_HEX_INFO} -out ${TMPPDIR}/hkdf1-out.bin openssl pkeyutl -derive -kdf HKDF -kdflen 48 -pkeyopt md:SHA256 -pkeyopt mode:EXTRACT_AND_EXPAND -pkeyopt hexkey:${HKDF_HEX_SECRET} -pkeyopt salt:"${HKDF_SALT}" -pkeyopt info:"${HKDF_INFO}" -out ${TMPPDIR}/hkdf2-out-pkcs11.bin -propquery provider=pkcs11 openssl pkeyutl -derive -kdf HKDF -kdflen 48 -pkeyopt md:SHA256 -pkeyopt mode:EXTRACT_AND_EXPAND -pkeyopt hexkey:${HKDF_HEX_SECRET} -pkeyopt salt:"${HKDF_SALT}" -pkeyopt info:"${HKDF_INFO}" -out ${TMPPDIR}/hkdf2-out.bin PASS hkdf-softokn.t (exit status: 0) Executing ./toaepsha2 ## Encrypt and decrypt with RSA OAEP openssl pkeyutl -encrypt -inkey "${BASEURI}" -pubin -pkeyopt pad-mode:oaep -pkeyopt digest:sha256 -pkeyopt mgf1-digest:sha256 -in ${SECRETFILE} -out ${SECRETFILE}.enc openssl pkeyutl -decrypt -inkey "${PRIURI}" -pkeyopt pad-mode:oaep -pkeyopt digest:sha256 -pkeyopt mgf1-digest:sha256 -in ${SECRETFILE}.enc -out ${SECRETFILE}.dec PASS oaepsha2-softokn.t (exit status: 0) Executing ./tpubkey ## Export RSA Public key to a file openssl pkey -in $BASEURI -pubin -pubout -out ${TMPPDIR}/baseout.pub Export Public key to a file (pub-uri) openssl pkey -in $PUBURI -pubin -pubout -out ${TMPPDIR}/pubout.pub Print Public key from private openssl pkey -in $PRIURI -pubout -text ## Export Public check error openssl pkey -in pkcs11:id=%de%ad -pubin -pubout -out ${TMPPDIR}/pubout-invlid.pub Could not read key of Public Key from pkcs11:id=%de%ad ## Export EC Public key to a file openssl pkey -in $ECBASEURI -pubin -pubout -out ${TMPPDIR}/baseecout.pub Export EC Public key to a file (pub-uri) openssl pkey -in $ECPUBURI -pubin -pubout -out ${TMPPDIR}/pubecout.pub Print EC Public key from private openssl pkey -in $ECPRIURI -pubout -text ## Check we can get RSA public keys from certificate objects Export Public key to a file (priv-uri) openssl pkey -in $PRI2URI -pubout -out ${TMPPDIR}/priv-cert.pub Export Public key to a file (base-uri) openssl pkey -in $BASE2URI -pubout -out ${TMPPDIR}/base-cert.pub Export Public EC key to a file (priv-uri) openssl pkey -in $ECPRI2URI -pubout -out ${TMPPDIR}/ec-priv-cert.pub Export Public key to a file (base-uri) openssl pkey -in $ECBASE2URI -pubout -out ${TMPPDIR}/ec-base-cert.pub PASS pubkey-softhsm.t (exit status: 0) Executing ./tpubkey ## Export RSA Public key to a file openssl pkey -in $BASEURI -pubin -pubout -out ${TMPPDIR}/baseout.pub Export Public key to a file (pub-uri) openssl pkey -in $PUBURI -pubin -pubout -out ${TMPPDIR}/pubout.pub Print Public key from private openssl pkey -in $PRIURI -pubout -text ## Export Public check error openssl pkey -in pkcs11:id=%de%ad -pubin -pubout -out ${TMPPDIR}/pubout-invlid.pub Could not read key of Public Key from pkcs11:id=%de%ad ## Export EC Public key to a file openssl pkey -in $ECBASEURI -pubin -pubout -out ${TMPPDIR}/baseecout.pub Export EC Public key to a file (pub-uri) openssl pkey -in $ECPUBURI -pubin -pubout -out ${TMPPDIR}/pubecout.pub Print EC Public key from private openssl pkey -in $ECPRIURI -pubout -text PASS pubkey-softokn.t (exit status: 0) Executing ./trand ## Test PKCS11 RNG openssl rand 1 20C4BBA2FFFFFF00:error:0308010C:digital envelope routines:inner_evp_generic_fetch:unsupported:crypto/evp/evp_fetch.c:341:Global default library context, Algorithm (PKCS11-RAND : 0), Properties () 20C4BBA2FFFFFF00:error:12000090:random number generator:rand_new_drbg:unable to fetch drbg:crypto/rand/rand_lib.c:647: openssl rand 1 & PASS rand-softhsm.t (exit status: 0) Executing ./trand ## Test PKCS11 RNG openssl rand 1 20147880FFFFFF00:error:0308010C:digital envelope routines:inner_evp_generic_fetch:unsupported:crypto/evp/evp_fetch.c:341:Global default library context, Algorithm (PKCS11-RAND : 0), Properties () 20147880FFFFFF00:error:12000090:random number generator:rand_new_drbg:unable to fetch drbg:crypto/rand/rand_lib.c:647: openssl rand 1 � PASS rand-softokn.t (exit status: 0) Executing ./treadkeys PASS readkeys-softhsm.t (exit status: 0) Executing ./treadkeys PASS readkeys-softokn.t (exit status: 0) Executing ./trsapss ## DigestSign and DigestVerify with RSA PSS openssl pkeyutl -sign -inkey "${BASEURI}" -digest sha256 -pkeyopt pad-mode:pss -pkeyopt mgf1-digest:sha256 -pkeyopt saltlen:digest -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha256-dgstsig.bin openssl pkeyutl -verify -inkey "${BASEURI}" -pubin -digest sha256 -pkeyopt pad-mode:pss -pkeyopt mgf1-digest:sha256 -pkeyopt saltlen:digest -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully Re-verify using OpenSSL default provider openssl pkeyutl -verify -inkey "${PUBURI}" -pubin -digest sha256 -pkeyopt pad-mode:pss -pkeyopt mgf1-digest:sha256 -pkeyopt saltlen:digest -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully PASS rsapss-softokn.t (exit status: 0) Executing ./tsession ALL A-OK!PASS session-softhsm.t (exit status: 0) Executing ./tsession ALL A-OK!PASS session-softokn.t (exit status: 0) ######################################## ## Searching for SoftHSM PKCS#11 library Using softhsm path /usr/lib64/pkcs11/libsofthsm2.so ######################################## ## Set up testing system Slot 0 has a free/uninitialized token. The token has been initialized and is reassigned to slot 2079782960 Creating new Self Sign CA Using slot 0 with a present token (0x7bf6f830) Key pair generated: Private Key Object; RSA label: caCert ID: 0000 Usage: decrypt, sign, unwrap Access: sensitive, always sensitive, never extractable, local Public Key Object; RSA 2048 bits label: caCert ID: 0000 Usage: encrypt, verify, wrap Access: local Generating a self signed certificate... X.509 Certificate Information: Version: 3 Serial Number (hex): 01 Validity: Not Before: Thu Nov 30 06:14:12 UTC 2023 Not After: Fri Nov 29 06:14:12 UTC 2024 Subject: CN=Issuer Subject Public Key Algorithm: RSA Algorithm Security Level: Medium (2048 bits) Modulus (bits 2048): 00:99:95:96:61:6d:46:ad:fc:90:03:31:cc:35:57:94 d2:c4:ee:06:d4:ff:70:77:74:9c:eb:6f:bd:18:5c:8f 3b:03:b5:c8:da:fb:83:ed:f5:8f:5f:91:72:5b:ca:f8 47:34:22:7f:5c:67:7a:94:36:4c:10:78:64:eb:ec:84 ca:9a:43:1a:29:93:1d:c3:6a:65:27:bc:82:a6:98:07 dd:14:72:aa:b5:93:74:46:25:c7:71:d9:91:e7:da:f4 87:3c:f1:d4:80:71:a7:ac:39:ea:d6:16:9b:f0:1b:cd 79:8f:0e:49:a4:1e:e7:6e:c8:5a:c1:39:64:c6:94:b1 17:67:8d:52:06:41:b5:44:2f:94:f8:b7:35:57:e7:b0 61:8e:f6:28:e0:63:82:a1:bc:c5:81:95:85:a5:d8:d7 c1:89:c3:5a:fe:55:bb:d4:45:41:e7:13:06:ea:33:50 99:89:34:5c:3b:c2:58:27:d8:1e:21:7a:fc:8c:d9:59 2a:48:76:da:fd:db:39:75:aa:16:6f:cd:fb:f6:b5:87 94:cd:9d:fb:31:7c:0c:a9:ec:40:13:15:4a:72:71:05 f7:75:17:7c:08:cd:df:d5:2f:5e:f2:78:80:be:3c:2d 09:19:be:39:b5:f0:8c:ea:b4:c1:89:7f:cf:29:8c:0d 6f Exponent (bits 24): 01:00:01 Extensions: Basic Constraints (critical): Certificate Authority (CA): TRUE Subject Alternative Name (not critical): RFC822Name: testcert@example.org Key Usage (critical): Digital signature. Subject Key Identifier (not critical): 4daecc8e292605dfd8cd2cff56ed27dc519bd7a5 Other Information: Public Key ID: sha1:4daecc8e292605dfd8cd2cff56ed27dc519bd7a5 sha256:0fe37da2b7acf8d28da9b01f4f96e9ddc4e77230c4b19ebe9c069848b88cba07 Public Key PIN: pin-sha256:D+N9ores+NKNqbAfT5bp3cTncjDEsZ6+nAaYSLiMugc= Signing certificate... Using slot 0 with a present token (0x7bf6f830) Created certificate: Certificate Object; type = X.509 cert label: caCert subject: DN: CN=Issuer serial: 01 ID: 0000 Using slot 0 with a present token (0x7bf6f830) Key pair generated: Private Key Object; RSA label: testCert ID: 0001 Usage: decrypt, sign, unwrap Access: sensitive, always sensitive, never extractable, local Public Key Object; RSA 2048 bits label: testCert ID: 0001 Usage: encrypt, verify, wrap Access: local Generating a signed certificate... Expiration time: Fri Nov 29 01:14:21 2024 CA expiration time: Fri Nov 29 01:14:12 2024 Warning: The time set exceeds the CA's expiration time X.509 Certificate Information: Version: 3 Serial Number (hex): 03 Validity: Not Before: Thu Nov 30 06:14:21 UTC 2023 Not After: Fri Nov 29 06:14:21 UTC 2024 Subject: CN=My Test Cert,O=PKCS11 Provider Subject Public Key Algorithm: RSA Algorithm Security Level: Medium (2048 bits) Modulus (bits 2048): 00:ce:db:fb:1a:b6:28:f8:db:69:7c:9d:f9:8a:88:57 bf:92:ae:b2:99:2f:3d:ea:be:f0:ce:4b:0c:a3:50:c4 46:1a:60:26:0e:f0:5e:9b:3e:56:ed:f4:9b:e0:02:1f dc:62:32:a1:34:26:13:1a:4c:8b:45:8e:c0:9b:2c:5d 6f:22:8b:ef:c1:88:cc:f2:d6:2e:0f:42:aa:19:f9:15 5f:6f:50:01:85:84:a5:58:e5:2d:6d:2b:1b:c1:e1:ce 12:81:e9:a9:01:93:f8:52:a1:62:8d:01:d7:9f:47:be 32:5d:66:b5:03:b6:01:cb:e9:31:d8:2b:39:48:d1:a5 96:71:e0:5e:ce:e1:07:f2:d7:2c:6d:05:df:7d:5a:07 af:2e:b7:3d:2f:32:db:dd:37:31:2f:63:e1:3f:9e:7f 13:4a:db:f7:a8:3a:f5:e4:f2:3a:91:5c:a4:70:bd:15 d5:51:80:16:60:4b:41:2a:c7:9a:6c:48:ea:f4:42:ef 49:ad:ed:af:b7:7d:1e:3f:8a:91:27:13:a6:ee:4e:ca df:69:66:25:72:93:db:d6:75:2c:a1:30:fa:66:e3:e9 23:3b:17:71:b7:00:cd:e8:04:f8:08:8d:24:0f:ab:8e f4:81:de:6e:4c:ec:ed:fa:2c:34:26:ee:6f:b8:63:76 09 Exponent (bits 24): 01:00:01 Extensions: Basic Constraints (critical): Certificate Authority (CA): FALSE Subject Alternative Name (not critical): RFC822Name: testcert@example.org Key Usage (critical): Digital signature. Key encipherment. Subject Key Identifier (not critical): d3690455396c9bc81221fb092899aa40e76fc905 Authority Key Identifier (not critical): 4daecc8e292605dfd8cd2cff56ed27dc519bd7a5 Other Information: Public Key ID: sha1:d3690455396c9bc81221fb092899aa40e76fc905 sha256:7018cce787c96ca0e0b2245c5341c775ff8f8c6c66d74c71f0017c9f872d2b1b Public Key PIN: pin-sha256:cBjM54fJbKDgsiRcU0HHdf+PjGxm10xx8AF8n4ctKxs= Signing certificate... Using slot 0 with a present token (0x7bf6f830) Created certificate: Certificate Object; type = X.509 cert label: testCert subject: DN: O=PKCS11 Provider, CN=My Test Cert serial: 03 ID: 0001 RSA PKCS11 URIS pkcs11:id=%00%01;pin-value=12345678 pkcs11:id=%00%01 pkcs11:type=public;id=%00%01 pkcs11:type=private;id=%00%01 pkcs11:type=cert;object=testCert Using slot 0 with a present token (0x7bf6f830) Key pair generated: Private Key Object; EC label: ecCert ID: 0002 Usage: decrypt, sign, unwrap, derive Access: sensitive, always sensitive, never extractable, local Public Key Object; EC EC_POINT 256 bits EC_POINT: 044104ed70e8ca9f9821bee619f58234881ed0eeb1a7392ba9aeb93bf99bf7e5c3c652cea7ad00ed6d79f500bacf410c6990028a7929c8581a5a37c6515509db295ab3 EC_PARAMS: 06082a8648ce3d030107 label: ecCert ID: 0002 Usage: encrypt, verify, wrap, derive Access: local Generating a signed certificate... Expiration time: Fri Nov 29 01:14:24 2024 CA expiration time: Fri Nov 29 01:14:12 2024 Warning: The time set exceeds the CA's expiration time X.509 Certificate Information: Version: 3 Serial Number (hex): 04 Validity: Not Before: Thu Nov 30 06:14:24 UTC 2023 Not After: Fri Nov 29 06:14:24 UTC 2024 Subject: CN=My EC Cert,O=PKCS11 Provider Subject Public Key Algorithm: EC/ECDSA Algorithm Security Level: High (256 bits) Curve: SECP256R1 X: 00:ed:70:e8:ca:9f:98:21:be:e6:19:f5:82:34:88:1e d0:ee:b1:a7:39:2b:a9:ae:b9:3b:f9:9b:f7:e5:c3:c6 52 Y: 00:ce:a7:ad:00:ed:6d:79:f5:00:ba:cf:41:0c:69:90 02:8a:79:29:c8:58:1a:5a:37:c6:51:55:09:db:29:5a b3 Extensions: Basic Constraints (critical): Certificate Authority (CA): FALSE Subject Alternative Name (not critical): RFC822Name: testcert@example.org Key Usage (critical): Digital signature. Subject Key Identifier (not critical): 92e8efb2292abbffaa5a1675059170ae527c7c30 Authority Key Identifier (not critical): 4daecc8e292605dfd8cd2cff56ed27dc519bd7a5 Other Information: Public Key ID: sha1:92e8efb2292abbffaa5a1675059170ae527c7c30 sha256:8a85ceb9cbae8ceb2c76c44d5ccfd9df57eadb223c8a0c515fe7f6a5de989665 Public Key PIN: pin-sha256:ioXOucuujOssdsRNXM/Z31fq2yI8igxRX+f2pd6YlmU= Signing certificate... Using slot 0 with a present token (0x7bf6f830) Created certificate: Certificate Object; type = X.509 cert label: ecCert subject: DN: O=PKCS11 Provider, CN=My EC Cert serial: 04 ID: 0002 Using slot 0 with a present token (0x7bf6f830) Key pair generated: Private Key Object; EC label: ecPeerCert ID: 0003 Usage: decrypt, sign, unwrap, derive Access: sensitive, always sensitive, never extractable, local Public Key Object; EC EC_POINT 256 bits EC_POINT: 044104187da4d4883b503e9f9e13ae0c72c614eb96b504c791bd37466470e91e2059bad2f61ddb91de8c66cc604a7b2241355ad47efb7a134cd4b80af1c14f71075e56 EC_PARAMS: 06082a8648ce3d030107 label: ecPeerCert ID: 0003 Usage: encrypt, verify, wrap, derive Access: local Generating a signed certificate... Expiration time: Fri Nov 29 01:14:27 2024 CA expiration time: Fri Nov 29 01:14:12 2024 Warning: The time set exceeds the CA's expiration time X.509 Certificate Information: Version: 3 Serial Number (hex): 05 Validity: Not Before: Thu Nov 30 06:14:27 UTC 2023 Not After: Fri Nov 29 06:14:27 UTC 2024 Subject: CN=My Peer EC Cert,O=PKCS11 Provider Subject Public Key Algorithm: EC/ECDSA Algorithm Security Level: High (256 bits) Curve: SECP256R1 X: 18:7d:a4:d4:88:3b:50:3e:9f:9e:13:ae:0c:72:c6:14 eb:96:b5:04:c7:91:bd:37:46:64:70:e9:1e:20:59:ba Y: 00:d2:f6:1d:db:91:de:8c:66:cc:60:4a:7b:22:41:35 5a:d4:7e:fb:7a:13:4c:d4:b8:0a:f1:c1:4f:71:07:5e 56 Extensions: Basic Constraints (critical): Certificate Authority (CA): FALSE Subject Alternative Name (not critical): RFC822Name: testcert@example.org Key Usage (critical): Digital signature. Subject Key Identifier (not critical): 798be098dc7d832e5cbfee810139758060c7f71b Authority Key Identifier (not critical): 4daecc8e292605dfd8cd2cff56ed27dc519bd7a5 Other Information: Public Key ID: sha1:798be098dc7d832e5cbfee810139758060c7f71b sha256:1ffe4ccb0e8ed801cded1fd26ba924781a38b654df9c9b52a961f9774f5d06d1 Public Key PIN: pin-sha256:H/5Myw6O2AHN7R/Sa6kkeBo4tlTfnJtSqWH5d09dBtE= Signing certificate... Using slot 0 with a present token (0x7bf6f830) Created certificate: Certificate Object; type = X.509 cert label: ecPeerCert subject: DN: O=PKCS11 Provider, CN=My Peer EC Cert serial: 05 ID: 0003 EC PKCS11 URIS pkcs11:id=%00%02;pin-value=12345678 pkcs11:id=%00%02 pkcs11:type=public;id=%00%02 pkcs11:type=private;id=%00%02 pkcs11:type=cert;object=ecCert pkcs11:id=%00%03;pin-value=12345678 pkcs11:id=%00%03 pkcs11:type=public;id=%00%03 pkcs11:type=private;id=%00%03 pkcs11:type=cert;object=ecPeerCert Using slot 0 with a present token (0x7bf6f830) Key pair generated: Private Key Object; EC_EDWARDS label: edCert ID: 0004 Usage: decrypt, sign, unwrap, derive Access: sensitive, always sensitive, never extractable, local Public Key Object; EC_EDWARDS EC_POINT 255 bits EC_POINT: 0420844d14da033545f657c41c2d9849fd37487efc55b3da0a3b72f6b001773531f5 EC_PARAMS: 130c656477617264733235353139 (OID 2.21.100.119.97.114.100.115.50.53.53.49.57) label: edCert ID: 0004 Usage: encrypt, verify, wrap, derive Access: local Generating a signed certificate... Expiration time: Fri Nov 29 01:14:30 2024 CA expiration time: Fri Nov 29 01:14:12 2024 Warning: The time set exceeds the CA's expiration time X.509 Certificate Information: Version: 3 Serial Number (hex): 06 Validity: Not Before: Thu Nov 30 06:14:30 UTC 2023 Not After: Fri Nov 29 06:14:30 UTC 2024 Subject: CN=My ED25519 Cert,O=PKCS11 Provider Subject Public Key Algorithm: EdDSA (Ed25519) Algorithm Security Level: High (256 bits) Curve: Ed25519 X: 84:4d:14:da:03:35:45:f6:57:c4:1c:2d:98:49:fd:37 48:7e:fc:55:b3:da:0a:3b:72:f6:b0:01:77:35:31:f5 Extensions: Basic Constraints (critical): Certificate Authority (CA): FALSE Subject Alternative Name (not critical): RFC822Name: testcert@example.org Key Usage (critical): Digital signature. Subject Key Identifier (not critical): 9a94b48703d3f483cf5d4f19b6f4165be1ae093d Authority Key Identifier (not critical): 4daecc8e292605dfd8cd2cff56ed27dc519bd7a5 Other Information: Public Key ID: sha1:9a94b48703d3f483cf5d4f19b6f4165be1ae093d sha256:cd0b48b9c51cc53bcc63f97f8e07a818ef7f48444e398f12d3a3fe2ac683eb14 Public Key PIN: pin-sha256:zQtIucUcxTvMY/l/jgeoGO9/SEROOY8S06P+KsaD6xQ= Signing certificate... Using slot 0 with a present token (0x7bf6f830) Created certificate: Certificate Object; type = X.509 cert label: edCert subject: DN: O=PKCS11 Provider, CN=My ED25519 Cert serial: 06 ID: 0004 ED25519 PKCS11 URIS pkcs11:id=%00%04 pkcs11:type=public;id=%00%04 pkcs11:type=private;id=%00%04 pkcs11:type=cert;object=edCert ## generate RSA key pair, self-signed certificate, remove public key Using slot 0 with a present token (0x7bf6f830) Key pair generated: Private Key Object; RSA label: testCert2 ID: 0005 Usage: decrypt, sign, unwrap Access: sensitive, always sensitive, never extractable, local Public Key Object; RSA 2048 bits label: testCert2 ID: 0005 Usage: encrypt, verify, wrap Access: local Generating a signed certificate... Expiration time: Fri Nov 29 01:14:36 2024 CA expiration time: Fri Nov 29 01:14:12 2024 Warning: The time set exceeds the CA's expiration time X.509 Certificate Information: Version: 3 Serial Number (hex): 07 Validity: Not Before: Thu Nov 30 06:14:36 UTC 2023 Not After: Fri Nov 29 06:14:36 UTC 2024 Subject: CN=My Test Cert 2,O=PKCS11 Provider Subject Public Key Algorithm: RSA Algorithm Security Level: Medium (2048 bits) Modulus (bits 2048): 00:b3:e8:1f:b8:6a:ab:68:44:f3:4c:1c:b8:e2:3e:c6 45:4b:32:87:19:8f:87:49:b0:3c:0d:b1:1f:08:17:cc eb:ff:08:1b:1b:cc:4c:fa:7f:66:84:ed:af:35:bc:a2 87:68:60:16:35:d0:c7:e0:b8:5b:90:d8:af:0a:42:7d ff:8f:e9:46:e7:ed:e5:71:9e:90:5f:a9:fc:b1:ad:4b c0:9a:ab:e6:0c:00:85:93:2f:3a:b6:99:71:25:74:97 cd:12:9e:69:15:a3:2f:47:1b:86:d2:9d:57:91:4c:20 1c:9e:4a:95:23:1f:33:fc:af:6d:3a:df:f3:dc:0f:aa 2c:12:d8:41:0a:e2:95:fa:8f:d9:60:34:8a:ec:4c:20 ea:94:7f:38:f1:3f:69:6e:64:ae:4f:09:12:a3:fc:bd 22:89:d5:a2:41:35:65:55:dd:e1:07:db:51:d5:32:56 3a:e6:3f:48:08:08:99:c8:58:6e:52:1f:67:1d:1a:88 1b:f4:b0:41:e6:83:73:64:59:57:94:a5:71:5f:91:cc 98:12:c1:44:d5:fe:04:e9:6a:4c:f9:e6:bb:68:94:29 59:f8:99:2e:c8:0f:9f:1b:0e:b2:d7:f5:d7:25:77:44 f5:2a:79:42:16:db:67:5e:de:4d:52:d4:4b:11:04:60 5d Exponent (bits 24): 01:00:01 Extensions: Basic Constraints (critical): Certificate Authority (CA): FALSE Subject Alternative Name (not critical): RFC822Name: testcert@example.org Key Usage (critical): Digital signature. Key encipherment. Subject Key Identifier (not critical): eebfdf3ce4af3bccb10be783bfbf6610e53de25d Authority Key Identifier (not critical): 4daecc8e292605dfd8cd2cff56ed27dc519bd7a5 Other Information: Public Key ID: sha1:eebfdf3ce4af3bccb10be783bfbf6610e53de25d sha256:83e33cb9fc00c328088c26b5035ff4d73d8df694644a3299743c0c6dfc7601ff Public Key PIN: pin-sha256:g+M8ufwAwygIjCa1A1/01z2N9pRkSjKZdDwMbfx2Af8= Signing certificate... Using slot 0 with a present token (0x7bf6f830) Created certificate: Certificate Object; type = X.509 cert label: testCert2 subject: DN: O=PKCS11 Provider, CN=My Test Cert 2 serial: 07 ID: 0005 Using slot 0 with a present token (0x7bf6f830) RSA2 PKCS11 URIS pkcs11:id=%00%05;pin-value=12345678 pkcs11:id=%00%05 pkcs11:type=private;id=%00%05 pkcs11:type=cert;object=testCert2 ## generate EC key pair, self-signed certificate, remove public key Using slot 0 with a present token (0x7bf6f830) Key pair generated: Private Key Object; EC label: ecCert2 ID: 0006 Usage: decrypt, sign, unwrap, derive Access: sensitive, always sensitive, never extractable, local Public Key Object; EC EC_POINT 384 bits EC_POINT: 0461045207707faf69fc169afc402f5f7fa37e112bea9c808c9d1eed1948ffc777bc4a4373607b9fb2a32b5d2f463a0d9391ba2457d39123cae5ceba9094794512a6d6b9704f990743e975e43fa01edbd18dda7546bda77d3a38d8de5d6fd87421af38 EC_PARAMS: 06052b81040022 label: ecCert2 ID: 0006 Usage: encrypt, verify, wrap, derive Access: local Generating a signed certificate... Expiration time: Fri Nov 29 01:14:40 2024 CA expiration time: Fri Nov 29 01:14:12 2024 Warning: The time set exceeds the CA's expiration time X.509 Certificate Information: Version: 3 Serial Number (hex): 08 Validity: Not Before: Thu Nov 30 06:14:40 UTC 2023 Not After: Fri Nov 29 06:14:40 UTC 2024 Subject: CN=My EC Cert 2,O=PKCS11 Provider Subject Public Key Algorithm: EC/ECDSA Algorithm Security Level: Ultra (384 bits) Curve: SECP384R1 X: 52:07:70:7f:af:69:fc:16:9a:fc:40:2f:5f:7f:a3:7e 11:2b:ea:9c:80:8c:9d:1e:ed:19:48:ff:c7:77:bc:4a 43:73:60:7b:9f:b2:a3:2b:5d:2f:46:3a:0d:93:91:ba Y: 24:57:d3:91:23:ca:e5:ce:ba:90:94:79:45:12:a6:d6 b9:70:4f:99:07:43:e9:75:e4:3f:a0:1e:db:d1:8d:da 75:46:bd:a7:7d:3a:38:d8:de:5d:6f:d8:74:21:af:38 Extensions: Basic Constraints (critical): Certificate Authority (CA): FALSE Subject Alternative Name (not critical): RFC822Name: testcert@example.org Key Usage (critical): Digital signature. Subject Key Identifier (not critical): 776be4fcb1d277bbf615d6d74809b682302b2498 Authority Key Identifier (not critical): 4daecc8e292605dfd8cd2cff56ed27dc519bd7a5 Other Information: Public Key ID: sha1:776be4fcb1d277bbf615d6d74809b682302b2498 sha256:f4fec8ceceb9e4a1cf2d6e143e5e39f74dd91524d726b9b6ccfbe3cad66ad73e Public Key PIN: pin-sha256:9P7Izs655KHPLW4UPl45903ZFSTXJrm2zPvjytZq1z4= Signing certificate... Using slot 0 with a present token (0x7bf6f830) Created certificate: Certificate Object; type = X.509 cert label: ecCert2 subject: DN: O=PKCS11 Provider, CN=My EC Cert 2 serial: 08 ID: 0006 Using slot 0 with a present token (0x7bf6f830) EC2 PKCS11 URIS pkcs11:id=%00%06;pin-value=12345678 pkcs11:id=%00%06 pkcs11:type=private;id=%00%06 pkcs11:type=cert;object=ecCert2 ## Show contents of softhsm token ---------------------------------------------------------------------------------------------------- Using slot 0 with a present token (0x7bf6f830) Certificate Object; type = X.509 cert label: edCert subject: DN: O=PKCS11 Provider, CN=My ED25519 Cert serial: 06 ID: 0004 Public Key Object; RSA 2048 bits label: testCert ID: 0001 Usage: encrypt, verify, wrap Access: local Public Key Object; EC EC_POINT 256 bits EC_POINT: 044104ed70e8ca9f9821bee619f58234881ed0eeb1a7392ba9aeb93bf99bf7e5c3c652cea7ad00ed6d79f500bacf410c6990028a7929c8581a5a37c6515509db295ab3 EC_PARAMS: 06082a8648ce3d030107 label: ecCert ID: 0002 Usage: encrypt, verify, wrap, derive Access: local Public Key Object; RSA 2048 bits label: caCert ID: 0000 Usage: encrypt, verify, wrap Access: local Certificate Object; type = X.509 cert label: testCert subject: DN: O=PKCS11 Provider, CN=My Test Cert serial: 03 ID: 0001 Private Key Object; RSA label: caCert ID: 0000 Usage: decrypt, sign, unwrap Access: sensitive, always sensitive, never extractable, local Private Key Object; RSA label: testCert2 ID: 0005 Usage: decrypt, sign, unwrap Access: sensitive, always sensitive, never extractable, local Certificate Object; type = X.509 cert label: testCert2 subject: DN: O=PKCS11 Provider, CN=My Test Cert 2 serial: 07 ID: 0005 Certificate Object; type = X.509 cert label: ecCert2 subject: DN: O=PKCS11 Provider, CN=My EC Cert 2 serial: 08 ID: 0006 Private Key Object; EC label: ecCert2 ID: 0006 Usage: decrypt, sign, unwrap, derive Access: sensitive, always sensitive, never extractable, local Certificate Object; type = X.509 cert label: caCert subject: DN: CN=Issuer serial: 01 ID: 0000 Private Key Object; EC_EDWARDS label: edCert ID: 0004 Usage: decrypt, sign, unwrap, derive Access: sensitive, always sensitive, never extractable, local Public Key Object; EC EC_POINT 256 bits EC_POINT: 044104187da4d4883b503e9f9e13ae0c72c614eb96b504c791bd37466470e91e2059bad2f61ddb91de8c66cc604a7b2241355ad47efb7a134cd4b80af1c14f71075e56 EC_PARAMS: 06082a8648ce3d030107 label: ecPeerCert ID: 0003 Usage: encrypt, verify, wrap, derive Access: local Certificate Object; type = X.509 cert label: ecPeerCert subject: DN: O=PKCS11 Provider, CN=My Peer EC Cert serial: 05 ID: 0003 Private Key Object; RSA label: testCert ID: 0001 Usage: decrypt, sign, unwrap Access: sensitive, always sensitive, never extractable, local Public Key Object; EC_EDWARDS EC_POINT 255 bits EC_POINT: 0420844d14da033545f657c41c2d9849fd37487efc55b3da0a3b72f6b001773531f5 EC_PARAMS: 130c656477617264733235353139 (OID 2.21.100.119.97.114.100.115.50.53.53.49.57) label: edCert ID: 0004 Usage: encrypt, verify, wrap, derive Access: local Certificate Object; type = X.509 cert label: ecCert subject: DN: O=PKCS11 Provider, CN=My EC Cert serial: 04 ID: 0002 Private Key Object; EC label: ecCert ID: 0002 Usage: decrypt, sign, unwrap, derive Access: sensitive, always sensitive, never extractable, local Private Key Object; EC label: ecPeerCert ID: 0003 Usage: decrypt, sign, unwrap, derive Access: sensitive, always sensitive, never extractable, local ---------------------------------------------------------------------------------------------------- ## Output configurations Generate openssl config file Export test variables to tmp.softhsm/testvars ## ######################################## ######################################## ## Set up testing system Creating new NSS Database Creating new Self Sign CA Creating Certificate request for 'My Test Cert' RSA PKCS11 URIS pkcs11:id=%12%b4%ff%27%41%e4%0c%9f%92%2a%28%d6%12%e4%06%82%77%40%01%eb;pin-value=12345678 pkcs11:id=%12%b4%ff%27%41%e4%0c%9f%92%2a%28%d6%12%e4%06%82%77%40%01%eb pkcs11:type=public;id=%12%b4%ff%27%41%e4%0c%9f%92%2a%28%d6%12%e4%06%82%77%40%01%eb pkcs11:type=private;id=%12%b4%ff%27%41%e4%0c%9f%92%2a%28%d6%12%e4%06%82%77%40%01%eb pkcs11:type=cert;object=testCert Creating Certificate request for 'My EC Cert' Creating Certificate request for 'My Peer EC Cert' EC PKCS11 URIS pkcs11:id=%4d%e5%2c%24%8b%2a%6f%82%e5%28%f4%b8%0c%86%39%61%db%4d%ae%e9;pin-value=12345678 pkcs11:id=%4d%e5%2c%24%8b%2a%6f%82%e5%28%f4%b8%0c%86%39%61%db%4d%ae%e9 pkcs11:type=public;id=%4d%e5%2c%24%8b%2a%6f%82%e5%28%f4%b8%0c%86%39%61%db%4d%ae%e9 pkcs11:type=private;id=%4d%e5%2c%24%8b%2a%6f%82%e5%28%f4%b8%0c%86%39%61%db%4d%ae%e9 pkcs11:type=cert;object=ecCert pkcs11:id=%48%37%26%90%ad%e7%22%b2%71%82%20%ca%00%24%65%ad%03%93%92%4b pkcs11:type=public;id=%48%37%26%90%ad%e7%22%b2%71%82%20%ca%00%24%65%ad%03%93%92%4b pkcs11:type=private;id=%48%37%26%90%ad%e7%22%b2%71%82%20%ca%00%24%65%ad%03%93%92%4b pkcs11:type=cert;object=ecPeerCert ## Show contents of softoken ---------------------------------------------------------------------------------------------------- Certificate Nickname Trust Attributes SSL,S/MIME,JAR/XPI selfCA Cu,Cu,Cu testCert u,u,u ecCert u,u,u ecPeerCert u,u,u certutil: Checking token "NSS Certificate DB" in slot "NSS User Private Key and Certificate Services" < 0> rsa 955a6a1c28f5f744a859a18abaec5834e765f354 NSS Certificate DB:selfCA < 1> rsa 12b4ff2741e40c9f922a28d612e40682774001eb NSS Certificate DB:testCert < 2> ec 4de52c248b2a6f82e528f4b80c863961db4daee9 NSS Certificate DB:ecCert < 3> ec 48372690ade722b2718220ca002465ad0393924b NSS Certificate DB:ecPeerCert ---------------------------------------------------------------------------------------------------- ## Output configurations Generate openssl config file Export tests variables to tmp.softokn/testvars ## ######################################## =============================================== pkcs11-provider 0.2: tests/test-suite.log =============================================== # TOTAL: 31 # PASS: 27 # SKIP: 0 # XFAIL: 0 # FAIL: 4 # XPASS: 0 # ERROR: 0 .. contents:: :depth: 2 FAIL: basic-softokn =================== Executing ./tbasic ## Raw Sign check error openssl pkeyutl -sign -inkey "${BASEURI}" -pkeyopt pad-mode:none -in ${TMPPDIR}/64Brandom.bin -out ${TMPPDIR}/raw-sig.bin Public Key operation error 20F4ACABFFFFFF00:error:0200007A:rsa routines:p11prov_sig_operate:data too small for key size:signature.c:874: ## Sign and Verify with provided Hash and RSA openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${PRIURI}" -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-sig.bin openssl pkeyutl -verify -inkey "${PUBURI}" -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-sig.bin Signature Verified Successfully ## Sign and Verify with provided Hash and RSA with DigestInfo struct openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${PRIURI}" -pkeyopt digest:sha256 -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-sig.bin openssl pkeyutl -verify -inkey "${PUBURI}" -pkeyopt digest:sha256 -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-sig.bin Signature Verified Successfully ## DigestSign and DigestVerify with RSA openssl pkeyutl -sign -inkey "${BASEURI}" -digest sha256 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha256-dgstsig.bin openssl pkeyutl -verify -inkey "${BASEURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully openssl pkeyutl -verify -inkey "${PUBURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully RSA basic encrypt and decrypt openssl pkeyutl -encrypt -inkey "${PUBURI}" -pubin -in ${SECRETFILE} -out ${SECRETFILE}.enc openssl pkeyutl -decrypt -inkey "${PRIURI}" -in ${SECRETFILE}.enc -out ${SECRETFILE}.dec ## Test Disallow Public Export openssl pkey -in $PUBURI -pubin -pubout -text ## Test CSR generation from RSA private keys openssl req -new -batch -key "${PRIURI}" -out ${TMPPDIR}/rsa_csr.pem openssl req -in ${TMPPDIR}/rsa_csr.pem -verify -noout Certificate request self-signature verify OK ## Test fetching public keys without PIN in config files openssl pkey -in $PUBURI -pubin -pubout -out ${TMPPDIR}/rsa.pub.nopin.pem openssl pkey -in $ECPUBURI -pubin -pubout -out ${TMPPDIR}/ec.pub.nopin.pem ## Test fetching public keys with a PIN in URI openssl pkey -in $BASEURIWITHPIN -pubin -pubout -out ${TMPPDIR}/rsa.pub.uripin.pem openssl pkey -in $ECBASEURIWITHPIN -pubin -pubout -out ${TMPPDIR}/ec.pub.uripin.pem ## Test prompting without PIN in config files Failed to get expected command output Original command output: Enter pass phrase for PKCS#11 Token (Slot 1 - NSS Internal Cryptographic Services): PKCS11 RSA Private Key (2048 bits) [Can't export and print private key data] URI pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%12%B4%FF%27%41%E4%0C%9F%92%2A%28%D6%12%E4%06%82%77%40%01%EB;type=private FAIL basic-softokn.t (exit status: 1) FAIL: basic-softhsm =================== Executing ./tbasic ## Raw Sign check error openssl pkeyutl -sign -inkey "${BASEURI}" -pkeyopt pad-mode:none -in ${TMPPDIR}/64Brandom.bin -out ${TMPPDIR}/raw-sig.bin Public Key operation error 20643880FFFFFF00:error:0200007A:rsa routines:p11prov_sig_operate:data too small for key size:signature.c:874: ## Sign and Verify with provided Hash and RSA openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${PRIURI}" -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-sig.bin openssl pkeyutl -verify -inkey "${PUBURI}" -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-sig.bin Signature Verified Successfully ## Sign and Verify with provided Hash and RSA with DigestInfo struct openssl dgst -sha256 -binary -out ${TMPPDIR}/sha256.bin ${SEEDFILE} openssl pkeyutl -sign -inkey "${PRIURI}" -pkeyopt digest:sha256 -in ${TMPPDIR}/sha256.bin -out ${TMPPDIR}/sha256-sig.bin openssl pkeyutl -verify -inkey "${PUBURI}" -pkeyopt digest:sha256 -pubin -in ${TMPPDIR}/sha256.bin -sigfile ${TMPPDIR}/sha256-sig.bin Signature Verified Successfully ## DigestSign and DigestVerify with RSA openssl pkeyutl -sign -inkey "${BASEURI}" -digest sha256 -in ${RAND64FILE} -rawin -out ${TMPPDIR}/sha256-dgstsig.bin openssl pkeyutl -verify -inkey "${BASEURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully openssl pkeyutl -verify -inkey "${PUBURI}" -pubin -digest sha256 -in ${RAND64FILE} -rawin -sigfile ${TMPPDIR}/sha256-dgstsig.bin Signature Verified Successfully RSA basic encrypt and decrypt openssl pkeyutl -encrypt -inkey "${PUBURI}" -pubin -in ${SECRETFILE} -out ${SECRETFILE}.enc openssl pkeyutl -decrypt -inkey "${PRIURI}" -in ${SECRETFILE}.enc -out ${SECRETFILE}.dec ## Test Disallow Public Export openssl pkey -in $PUBURI -pubin -pubout -text ## Test CSR generation from RSA private keys openssl req -new -batch -key "${PRIURI}" -out ${TMPPDIR}/rsa_csr.pem openssl req -in ${TMPPDIR}/rsa_csr.pem -verify -noout Certificate request self-signature verify OK ## Test fetching public keys without PIN in config files openssl pkey -in $PUBURI -pubin -pubout -out ${TMPPDIR}/rsa.pub.nopin.pem openssl pkey -in $ECPUBURI -pubin -pubout -out ${TMPPDIR}/ec.pub.nopin.pem ## Test fetching public keys with a PIN in URI openssl pkey -in $BASEURIWITHPIN -pubin -pubout -out ${TMPPDIR}/rsa.pub.uripin.pem openssl pkey -in $ECBASEURIWITHPIN -pubin -pubout -out ${TMPPDIR}/ec.pub.uripin.pem ## Test prompting without PIN in config files Failed to get expected command output Original command output: Enter pass phrase for PKCS#11 Token (Slot 2079782960 - SoftHSM slot ID 0x7bf6f830): PKCS11 RSA Private Key (2048 bits) [Can't export and print private key data] URI pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=bfd637d8fbf6f830;token=token_name;id=%00%01;object=testCert;type=private FAIL basic-softhsm.t (exit status: 1) FAIL: tls-softokn ================= Executing ./ttls ## Test SSL_CTX creation SSL Context works! ## Test an actual TLS connection Check message was successfully delivered over TLS 20047C9CFFFFFF00:error:8000006F:system library:BIO_connect:Connection refused:crypto/bio/bio_sock2.c:114:calling connect() 20047C9CFFFFFF00:error:10000067:BIO routines:BIO_connect:connect error:crypto/bio/bio_sock2.c:116: 20047C9CFFFFFF00:error:8000006F:system library:BIO_connect:Connection refused:crypto/bio/bio_sock2.c:114:calling connect() 20047C9CFFFFFF00:error:10000067:BIO routines:BIO_connect:connect error:crypto/bio/bio_sock2.c:116: connect:errno=111 kill: sending signal to 795492 failed: No such process /builddir/build/BUILD/pkcs11-provider-0.2/tests/helpers.sh: line 66: 795490 Killed $CHECKER openssl s_server -accept "${PORT}" -key "${PRIURI}" -cert "${CRTURI}" 0<&3 Server output: FAIL tls-softokn.t (exit status: 1) FAIL: tls-softhsm ================= Executing ./ttls ## Test SSL_CTX creation SSL Context works! ## Test an actual TLS connection Check message was successfully delivered over TLS 20843888FFFFFF00:error:8000006F:system library:BIO_connect:Connection refused:crypto/bio/bio_sock2.c:114:calling connect() 20843888FFFFFF00:error:10000067:BIO routines:BIO_connect:connect error:crypto/bio/bio_sock2.c:116: 20843888FFFFFF00:error:8000006F:system library:BIO_connect:Connection refused:crypto/bio/bio_sock2.c:114:calling connect() 20843888FFFFFF00:error:10000067:BIO routines:BIO_connect:connect error:crypto/bio/bio_sock2.c:116: connect:errno=111 kill: sending signal to 795515 failed: No such process /builddir/build/BUILD/pkcs11-provider-0.2/tests/helpers.sh: line 66: 795513 Killed $CHECKER openssl s_server -accept "${PORT}" -key "${PRIURI}" -cert "${CRTURI}" 0<&3 Server output: FAIL tls-softhsm.t (exit status: 1) Executing ./ttls ## Test SSL_CTX creation SSL Context works! ## Test an actual TLS connection Check message was successfully delivered over TLS 20843888FFFFFF00:error:8000006F:system library:BIO_connect:Connection refused:crypto/bio/bio_sock2.c:114:calling connect() 20843888FFFFFF00:error:10000067:BIO routines:BIO_connect:connect error:crypto/bio/bio_sock2.c:116: 20843888FFFFFF00:error:8000006F:system library:BIO_connect:Connection refused:crypto/bio/bio_sock2.c:114:calling connect() 20843888FFFFFF00:error:10000067:BIO routines:BIO_connect:connect error:crypto/bio/bio_sock2.c:116: connect:errno=111 kill: sending signal to 795515 failed: No such process /builddir/build/BUILD/pkcs11-provider-0.2/tests/helpers.sh: line 66: 795513 Killed $CHECKER openssl s_server -accept "${PORT}" -key "${PRIURI}" -cert "${CRTURI}" 0<&3 Server output: FAIL tls-softhsm.t (exit status: 1) Executing ./ttls ## Test SSL_CTX creation SSL Context works! ## Test an actual TLS connection Check message was successfully delivered over TLS 20047C9CFFFFFF00:error:8000006F:system library:BIO_connect:Connection refused:crypto/bio/bio_sock2.c:114:calling connect() 20047C9CFFFFFF00:error:10000067:BIO routines:BIO_connect:connect error:crypto/bio/bio_sock2.c:116: 20047C9CFFFFFF00:error:8000006F:system library:BIO_connect:Connection refused:crypto/bio/bio_sock2.c:114:calling connect() 20047C9CFFFFFF00:error:10000067:BIO routines:BIO_connect:connect error:crypto/bio/bio_sock2.c:116: connect:errno=111 kill: sending signal to 795492 failed: No such process /builddir/build/BUILD/pkcs11-provider-0.2/tests/helpers.sh: line 66: 795490 Killed $CHECKER openssl s_server -accept "${PORT}" -key "${PRIURI}" -cert "${CRTURI}" 0<&3 Server output: FAIL tls-softokn.t (exit status: 1) Executing ./turi ## Check that storeutl returns URIs openssl storeutl -text pkcs11: ## Check returned URIs work to find objects $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=bfd637d8fbf6f830;token=token_name;id=%00%02;object=ecCert;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=bfd637d8fbf6f830;token=token_name;id=%00%01;object=testCert;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=bfd637d8fbf6f830;token=token_name;id=%2E%24%2F%F3%A5%02%5B%AF%8A%C8%9F%D1%6C%02%F6%AB;object=Test%20EC%20gen%20[%252e%2524%252f];type=private openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=bfd637d8fbf6f830;token=token_name;id=%00%00;object=caCert;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=bfd637d8fbf6f830;token=token_name;id=%00%00;object=caCert;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=bfd637d8fbf6f830;token=token_name;id=%4E%45%B4%53%17%50%BF%12%E6%A6%3B%72%BA%5A%59%DD;object=4e45b453;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=bfd637d8fbf6f830;token=token_name;id=%00%05;object=testCert2;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=bfd637d8fbf6f830;token=token_name;id=%91%DF%22%2E%CA%7E%98%4A%41%8D%54%DE%D8%38%25%B8;object=Test%20RSA-PSS%20gen%20[%2591%25df%2522];type=private openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=bfd637d8fbf6f830;token=token_name;id=%4E%45%B4%53%17%50%BF%12%E6%A6%3B%72%BA%5A%59%DD;object=4e45b453;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=bfd637d8fbf6f830;token=token_name;id=%00%06;object=ecCert2;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=bfd637d8fbf6f830;token=token_name;id=%00%03;object=ecPeerCert;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=bfd637d8fbf6f830;token=token_name;id=%2E%24%2F%F3%A5%02%5B%AF%8A%C8%9F%D1%6C%02%F6%AB;object=Test%20EC%20gen%20[%252e%2524%252f];type=public openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=bfd637d8fbf6f830;token=token_name;id=%C5%F7%D2%8F%53%15%FA%6D%30%AC%7E%60%B6%D6%A1%3C;object=Test%20RSA%20gen%20[%25c5%25f7%25d2];type=public openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=bfd637d8fbf6f830;token=token_name;id=%00%01;object=testCert;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=bfd637d8fbf6f830;token=token_name;id=%91%DF%22%2E%CA%7E%98%4A%41%8D%54%DE%D8%38%25%B8;object=Test%20RSA-PSS%20gen%20[%2591%25df%2522];type=public openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=bfd637d8fbf6f830;token=token_name;id=%00%02;object=ecCert;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=bfd637d8fbf6f830;token=token_name;id=%C5%F7%D2%8F%53%15%FA%6D%30%AC%7E%60%B6%D6%A1%3C;object=Test%20RSA%20gen%20[%25c5%25f7%25d2];type=private openssl storeutl -text "$uri" $uri=pkcs11:model=SoftHSM%20v2;manufacturer=SoftHSM%20project;serial=bfd637d8fbf6f830;token=token_name;id=%00%03;object=ecPeerCert;type=private openssl storeutl -text "$uri" ## Check each URI component is tested $cmp=pkcs11:model=SoftHSM%20v2 openssl storeutl -text "pkcs11:${cmp}" $cmp=manufacturer=SoftHSM%20project openssl storeutl -text "pkcs11:${cmp}" $cmp=serial=bfd637d8fbf6f830 openssl storeutl -text "pkcs11:${cmp}" $cmp=token=token_name openssl storeutl -text "pkcs11:${cmp}" $cmp=id=%00%02 openssl storeutl -text "pkcs11:${cmp}" $cmp=object=ecCert openssl storeutl -text "pkcs11:${cmp}" $cmp=type=public openssl storeutl -text "pkcs11:${cmp}" PASS uri-softhsm.t (exit status: 0) Executing ./turi ## Check that storeutl returns URIs openssl storeutl -text pkcs11: ## Check returned URIs work to find objects $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%95%5A%6A%1C%28%F5%F7%44%A8%59%A1%8A%BA%EC%58%34%E7%65%F3%54;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%12%B4%FF%27%41%E4%0C%9F%92%2A%28%D6%12%E4%06%82%77%40%01%EB;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%4D%E5%2C%24%8B%2A%6F%82%E5%28%F4%B8%0C%86%39%61%DB%4D%AE%E9;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%48%37%26%90%AD%E7%22%B2%71%82%20%CA%00%24%65%AD%03%93%92%4B;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%ED%78%B8%28%25%F5%04%EA%1D%2D%2B%02%90%8E%00%64;object=ed78b828;type=public openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%89%CA%9A%C7%2A%08%7A%6F%87%6A%57%8D%90%E0%F9%0B;object=Test%20RSA%20gen%20[%2589%25ca%259a];type=public openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%FC%77%62%01%82%AC%6D%50%3A%A9%E4%F2%04%E4%A7%C3;object=Test%20RSA-PSS%20gen%20[%25fc%2577%2562];type=public openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%00%6A%96%B4%9C%60%71%F9%7D%39%33%F8%20%E5%75%02;object=Test%20EC%20gen%20[%2500%256a%2596];type=public openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%95%5A%6A%1C%28%F5%F7%44%A8%59%A1%8A%BA%EC%58%34%E7%65%F3%54;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%12%B4%FF%27%41%E4%0C%9F%92%2A%28%D6%12%E4%06%82%77%40%01%EB;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%4D%E5%2C%24%8B%2A%6F%82%E5%28%F4%B8%0C%86%39%61%DB%4D%AE%E9;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%48%37%26%90%AD%E7%22%B2%71%82%20%CA%00%24%65%AD%03%93%92%4B;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%ED%78%B8%28%25%F5%04%EA%1D%2D%2B%02%90%8E%00%64;object=ed78b828;type=private openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%89%CA%9A%C7%2A%08%7A%6F%87%6A%57%8D%90%E0%F9%0B;object=Test%20RSA%20gen%20[%2589%25ca%259a];type=private openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%FC%77%62%01%82%AC%6D%50%3A%A9%E4%F2%04%E4%A7%C3;object=Test%20RSA-PSS%20gen%20[%25fc%2577%2562];type=private openssl storeutl -text "$uri" $uri=pkcs11:model=NSS%203;manufacturer=Mozilla%20Foundation;serial=0000000000000000;token=NSS%20Certificate%20DB;id=%00%6A%96%B4%9C%60%71%F9%7D%39%33%F8%20%E5%75%02;object=Test%20EC%20gen%20[%2500%256a%2596];type=private openssl storeutl -text "$uri" ## Check each URI component is tested $cmp=pkcs11:model=NSS%203 openssl storeutl -text "pkcs11:${cmp}" $cmp=manufacturer=Mozilla%20Foundation openssl storeutl -text "pkcs11:${cmp}" $cmp=serial=0000000000000000 openssl storeutl -text "pkcs11:${cmp}" $cmp=token=NSS%20Certificate%20DB openssl storeutl -text "pkcs11:${cmp}" $cmp=id=%95%5A%6A%1C%28%F5%F7%44%A8%59%A1%8A%BA%EC%58%34%E7%65%F3%54 openssl storeutl -text "pkcs11:${cmp}" $cmp=type=public openssl storeutl -text "pkcs11:${cmp}" PASS uri-softokn.t (exit status: 0) RPM build errors: + exit 1 error: Bad exit status from /var/tmp/rpm-tmp.CdlNvV (%check) Bad exit status from /var/tmp/rpm-tmp.CdlNvV (%check) Child return code was: 1 EXCEPTION: [Error('Command failed: \n # bash --login -c /usr/bin/rpmbuild -bb --noclean --target riscv64 --nodeps /builddir/build/SPECS/pkcs11-provider.spec\n', 1)] Traceback (most recent call last): File "/usr/lib/python3.11/site-packages/mockbuild/trace_decorator.py", line 93, in trace result = func(*args, **kw) ^^^^^^^^^^^^^^^^^ File "/usr/lib/python3.11/site-packages/mockbuild/util.py", line 597, in do_with_status raise exception.Error("Command failed: \n # %s\n%s" % (command, output), child.returncode) mockbuild.exception.Error: Command failed: # bash --login -c /usr/bin/rpmbuild -bb --noclean --target riscv64 --nodeps /builddir/build/SPECS/pkcs11-provider.spec