[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] etoken on linux


  • Subject: Re: [Openvpn-users] etoken on linux
  • From: jamona perez <jamon_perez@xxxxxxxxxxx>
  • Date: Thu, 4 Oct 2007 15:20:02 +0200
  • Importance: Normal

okay debug's on its way
 
Program received signal SIGSEGV, Segmentation fault.
0x00306869 in ENGINE_get_RSA () from /lib/libcrypto.so.4
(gdb) bt
#0  0x00306869 in ENGINE_get_RSA () from /lib/libcrypto.so.4
#1  0x00c4df89 in ssl3_connect () from /lib/libssl.so.4
#2  0x00c523c5 in ssl3_read_bytes () from /lib/libssl.so.4
#3  0x00c4fa1f in ssl3_renegotiate_check () from /lib/libssl.so.4
#4  0x00c577a3 in SSL_read () from /lib/libssl.so.4
#5  0x00c61e92 in BIO_f_ssl () from /lib/libssl.so.4
#6  0x0980f718 in ?? ()
#7  0x00000400 in ?? ()
#8  0x00000000 in ?? ()
(gdb) thread apply all bt
Thread 2 (Thread 26475424 (LWP 29014)):
#0  0x006ad7a2 in _dl_sysinfo_int80 () from /lib/ld-linux.so.2
#1  0x0019bf06 in __nanosleep_nocancel () from /lib/tls/libc.so.6
#2  0x002aab58 in SYS_USleep () from /usr/lib/libpcsclite.so.0
#3  0x002a9e70 in SCardGetStatusChange () from /usr/lib/libpcsclite.so.0
#4  0x003b6f39 in ReaderStates::Wait () from /usr/local/lib/libetokendll.so
#5  0x003b75ca in TrackListenerProc () from /usr/local/lib/libetokendll.so
#6  0x00cac3cc in start_thread () from /lib/tls/libpthread.so.0
#7  0x001d9c3e in clone () from /lib/tls/libc.so.6
Thread 1 (Thread -1208248640 (LWP 29011)):
#0  0x00306869 in ENGINE_get_RSA () from /lib/libcrypto.so.4
#1  0x00c4df89 in ssl3_connect () from /lib/libssl.so.4
#2  0x00c523c5 in ssl3_read_bytes () from /lib/libssl.so.4
#3  0x00c4fa1f in ssl3_renegotiate_check () from /lib/libssl.so.4
#4  0x00c577a3 in SSL_read () from /lib/libssl.so.4
#5  0x00c61e92 in BIO_f_ssl () from /lib/libssl.so.4
#6  0x0980f718 in ?? ()
#7  0x00000400 in ?? ()
#8  0x00000000 in ?? ()
(gdb)

Does this mean that it is OpenSSL which is to blame ?
 
thanks



> Date: Wed, 3 Oct 2007 10:59:01 +0200
> From: alon.barlev@xxxxxxxxx
> To: jamon_perez@xxxxxxxxxxx
> Subject: Re: [Openvpn-users] etoken on linux
> CC: openvpn-users@xxxxxxxxxxxxxxxxxxxxx
>
> I know people are working with it.
> Please run openvpn under gdb and see if it gives some information.
> If it does, please execute "bt" and "thread apply all bt" and paste the output.
>
> Alon.
>
> On 10/3/07, jamona perez <jamon_perez@xxxxxxxxxxx> wrote:
> >
> > Hi,
> >
> > that's what I did.
> > I've installed following the instructions from the PDF
> > "etoken PKI Client 3.65 for linux" :
> > - installed pcsc-lite 1.2.0 (as specified in the doc), from the sources,
> > did go fine
> > - installed etoken-3-65.3-linux-redhat with the "petoken install 1"
> > command,
> > that also gave no error, after I'd fooled the installer into believing my
> > CentOS 4.4
> > was in fact a redhat Enterprise 4 (which I believe it is)
> > then :
> > - installed lzo and lzo-devel rpms taken from Dag Wiers rpm repo (v
> > 1.08-4.2.el4.i386)
> > - built openvpn-2.1_rc4 with rpmbuild -tb openvpn-2.1_rc4.tar.gz
> > - installed the rpm
> >
> > so my question remains. Is the build incorrect ?
> > should I upgrade pcsc-lite to 1.4.4 ?
> > does anyone has experienced that this particular library (libetpkcs11.so)
> > works with openvpn ?
> >
> > the provided utilities etckdump and etckinit work all right, and remember
> > that
> > openvpn --list-pkcs11-objects /usr/local/lib/libetpkcs11.so 0
> > prompts me correctly for a PIN a returns the objects fine
> >
> > thanks
> >
> >
> > ________________________________
> >
> > > Date: Tue, 2 Oct 2007 20:55:26 +0300
> > > From: alon.barlev@xxxxxxxxx
> > > To: jamon_perez@xxxxxxxxxxx
> > > Subject: Re: [Openvpn-users] etoken on linux
> >
> > >
> > > You should install the etoken drivers correctly on Linux.
> > > Don't copy anything from other system.
> > >
> > > On 10/2/07, jamona perez <jamon_perez@xxxxxxxxxxx> wrote:
> > > >
> > > > I've installed openvpn on a linux server (RHEL 4) and several windows
> > > > clients, using cryptoapi to use with etokens pro.
> > > > It took me a few hours where I did struggle for several days with
> > openswan.
> > > > OpenVPN rocks ;-)
> > > > Now to the point, I have some "Linux clients", so I've installed the
> > > > libetpkcs11.so library from the Aladdin PKI client on a test PC running
> > > > CentOS 4.4
> > > > when openvpn starts, it segfaults just after "VERIFY OK: depth=0,
> > > > /C=xxxxxxxx" (verose 3) and "SSLv3 write client key exchange A" (verbose
> > 9).
> > > > Is it a problem with my openvpn build ?
> > > > Does anyone had experience that such a setup had worked
> > > > (libetpkcs11.so+openvpn) ?
> > > > the pity is that
> > > > openvpn --show-pkcs11-objects /usr/local/lib/libetpkcs11.so 0
> > > > correctly prompts me for the PIN and shows me what is on the token...
> > > >
> > > > thanks in advance for your help
> > > >
> > > >
> > > > ________________________________
> > > > Avec Windows Live Spaces, publiez directement des messages électroniques
> > sur
> > > > votre blog ou ajoutez-y des photos, des blagues et d'autres infos. C'est
> > > > gratuit !
> > > >
> > -------------------------------------------------------------------------
> > > > This SF.net email is sponsored by: Microsoft
> > > > Defy all challenges. Microsoft(R) Visual Studio 2005.
> > > >
> > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> > > > _______________________________________________
> > > > Openvpn-users mailing list
> > > > Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
> > > >
> > https://lists.sourceforge.net/lists/listinfo/openvpn-users
> > > >
> > > >
> >
> >
> > ________________________________
> > Besoin d'un e-mail ? Créez gratuitement un compte Windows Live Hotmail, la
> > boîte e-mail entièrement personnalisable ! au même endroit.
> > -------------------------------------------------------------------------
> > This SF.net email is sponsored by: Microsoft
> > Defy all challenges. Microsoft(R) Visual Studio 2005.
> > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> > _______________________________________________
> > Openvpn-users mailing list
> > Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
> > https://lists.sourceforge.net/lists/listinfo/openvpn-users
> >
> >



Besoin d'un e-mail ? Créez gratuitement un compte Windows Live Hotmail et bénéficiez d'un filtre antispam gratuit ! Windows Live Hotmail