[pkg-opensc-maint] Bug#830863: opensc-pkcs11: Unable to sign

[Stanimir Stoyanov]

Package: opensc-pkcs11
Version: 0.16.0-1
Severity: important

Dear Maintainer,

It is about omnikey reader with CardOS smart card.

The output of OPENSC_DEBUG=2 pkcs11-tool --module /usr/lib/x86_64-linux-gnu
/onepin-opensc-pkcs11.so -t -l:

Please enter User PIN:
0x7feae107d700 14:18:05.293 [onepin-opensc-pkcs11] sec.c:206:sc_pin_cmd:
returning with: 0 (Success)
C_SeedRandom() and C_GenerateRandom():
  seeding (C_SeedRandom) not supported
  seems to be OK
Digests:
  all 4 digest functions seem to work
  MD5: OK
  SHA-1: OK
  RIPEMD160: OK
Signatures (currently only RSA signatures)
  testing key 0 (StampIT)
0x7feae107d700 14:18:10.557 [onepin-opensc-pkcs11] card-
cardos.c:475:cardos_select_file: called
0x7feae107d700 14:18:10.582 [onepin-opensc-pkcs11]
sec.c:72:sc_set_security_env: returning with: 0 (Success)
0x7feae107d700 14:18:10.621 [onepin-opensc-pkcs11] sec.c:44:sc_decipher:
returning with: -1200 (Card command failed)
0x7feae107d700 14:18:10.630 [onepin-opensc-pkcs11] card-
cardos.c:475:cardos_select_file: called
0x7feae107d700 14:18:10.723 [onepin-opensc-pkcs11]
ctx.c:842:sc_release_context: called
error: PKCS11 function C_SignFinal failed: rv = CKR_GENERAL_ERROR (0x5)

Aborting.



-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.6.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages opensc-pkcs11 depends on:
ii  libc6        2.22-13
ii  libssl1.0.2  1.0.2h-1
ii  zlib1g       1:1.2.8.dfsg-2+b1

opensc-pkcs11 recommends no packages.

opensc-pkcs11 suggests no packages.

-- no debconf information