[Opendnssec-user]About AEP Keyper Testing

[John Dickinson]

On 29 Jan 2013, at 10:25, 刘硕 <shuoleo at 126.com> wrote:

> Hi everybody
>  
> I'm testing AEP Keyper with opendnssec-1.4.0rc2.
> What I have changed in conf.xml is as follows:
>              <Repository name="SoftHSM">
>                         <Module>/opt/Keyper/PKCS11Provider/pkcs11.so</Module>
>                         <TokenLabel>xxx</TokenLabel>
>                         <PIN>xxx</PIN>
>                         <SkipPublicKey/>
>                 </Repository>
> The <Module> and <PIN> and <TokenLabel> are checked and right, the name of Repository is not sure.
> But opendnssec complains:
> Jan 29 18:04:15 CST-BJ-103 ods-enforcerd: opendnssec starting...
> Jan 29 18:04:15 CST-BJ-103 ods-enforcerd: opendnssec forked OK...
> Jan 29 18:04:15 CST-BJ-103 ods-enforcerd: opendnssec Parent exiting...
> Jan 29 18:04:15 CST-BJ-103 ods-enforcerd: opendnssec started (version 1.4.0rc2), pid 4496
> Jan 29 18:04:15 CST-BJ-103 ods-enforcerd: hsm_session_init(): PKCS#11 module load failed: /opt/Keyper/PKCS11Provider/pkcs11.so
>  
>  
> Does anybody have the experience of testing AEP Keyper with opendnssec?
>  
> 

It is a long time since I used an AEP Keyper but I seem to remember that the library is not called pkcs11.so. IIRC it had a longer name.

HTH
John