Получение sec_error_io при аутентификации в токен PKCS11? ⇐ Linux

[Anonymous]

Я пишу демо для генерации и хранения пары ключей в устройстве TPM на Linux (Ubuntu) от NSS и PKCS#11. < /p>
Я добавил модуль TPM2-PKCS11 в nssdb, например: < /p>
time@PF2CMPHV:~$ modutil -list -dbdir sql:/home/time/.time/nssdb

Listing of PKCS #11 Modules
-----------------------------------------------------------
1. NSS Internal PKCS #11 Module
uri: pkcs11:library-manufacturer=Mozilla%20Foundation;library-description=NSS%20Internal%20Crypto%20Services;library-version=3.98
slots: 2 slots attached
status: loaded

slot: NSS Internal Cryptographic Services
token: NSS Generic Crypto Services
uri: pkcs11:token=NSS%20Generic%20Crypto%20Services;manufacturer=Mozilla%20Foundation;serial=0000000000000000;model=NSS%203

slot: NSS User Private Key and Certificate Services
token: NSS Certificate DB
uri: pkcs11:token=NSS%20Certificate%20DB;manufacturer=Mozilla%20Foundation;serial=0000000000000000;model=NSS%203

2. TPM2_PKCS11
library name: /usr/local/lib/libtpm2_pkcs11.so
uri: pkcs11:library-manufacturer=tpm2-software.github.io;library-description=TPM2.0%20Cryptoki;library-version=1.9
slots: 3 slots attached
status: loaded

slot: time.test
token: time.test
uri: pkcs11:token=time.test;manufacturer=Intel;serial=0000000000000000;model=Intel

slot: time.test.token
token: time.test.token
uri: pkcs11:token=time.test.token;manufacturer=Intel;serial=0000000000000000;model=Intel

slot:
token:
uri: pkcs11:manufacturer=Intel;serial=0000000000000000;model=Intel
< /code>
Кроме того, я перечисляю доступные слоты от pkcs11-tool < /p>
time@PF2CMPHV:~$ pkcs11-tool --module /usr/local/lib/libtpm2_pkcs11.so --list-slots
Available slots:
Slot 0 (0x1): time.test
token label : time.test
token manufacturer : Intel
token model : Intel
token flags : login required, rng, token initialized, PIN initialized
hardware version : 1.38
firmware version : 244.14
serial num : 0000000000000000
pin min/max : 0/128
Slot 1 (0x2): time.test.token
token label : time.test.token
token manufacturer : Intel
token model : Intel
token flags : login required, rng, token initialized, PIN initialized
hardware version : 1.38
firmware version : 244.14
serial num : 0000000000000000
pin min/max : 0/128
Slot 2 (0x3):
token state: uninitialized
< /code>
Я инициализировал PIN -код токена. Затем я стараюсь получить их токен и входить в систему по коду: < /p>
static const char db_dir[] = "sql:/home/time/.time/nssdb";

int InitNSSDatabase() {
SECStatus rv = NSS_Init(db_dir);
if (rv != SECSuccess) {
std::cout

Подробнее здесь: https://stackoverflow.com/questions/794 ... cs11-token