YubiHSM 2 PKCS11 Cant connect - security

I have a YubiHSM2 HSM device and want to access it via PKCS11. I have installed the YubiHSM2 drivers as well as Libp11 and OpenSC tools.
However, when I try to connect and generate a key via:
pkcs11-tool --module 'C:\Users\myUser\yubihsm2-sdk\bin\yubihsm_pkcs11.dll --login --pin 0001password \
--keypairgen --key-type rsa:2048 --label "my_key" --usage-sign
I receive:
error: Failed to laod pkcs11 module
Aborting.
I am thinking maybe I am adressing the dll file wrong? I am trying to implement this on Windows, I had it working on Unix System where I had to address a xxx.so file.
Does anyone have an idea or similar experience with a HSM module?
Thanks for your help!
Best regards
LikeAKemper

#everyone.
I found the issue. It only works if I am already in the directory where the DLL is located. Now I am not sure why this is an issue for the command so let me know if you something about that.
Anyway thank you.

Related

gnome-keyring GPG integration in headless Ubuntu server not working

I'm trying to use gnome-keyring to memorize my GPG passphrase in a headless Ubuntu server (22.04.1 LTS GNU/Linux 5.15.0-57-generic x86_64). The reason I'm trying to do this with gnome-keyring and not using the gpg-agent cache is that I'd like for the GPG certificate to be immediately accessible to be used by some systemd cronjobs when I reboot my server.
I've followed the Gnome/Keyring instructions but using pinentry-gnome3 doesn't seem to work:
No Gcr System Prompter available, falling back to curses
I've also tried using pinentry-gtk-2 like it is mentioned in GnuPG instructions and although I don't get any error, the passphrase is not stored.
When doing some debugging, I've found some weird behavior. Trying to store something in my keyring gives me this error:
$ secret-tool store --label='test' foo bar
secret-tool: Cannot create an item in a locked collection
Anyone can help me? I'm also willing to drop using gnome-keyring for something else, but I haven't found anything that would fit my use case.

AWS IoT basicPubSub.py example - clarification on certificates (CLI)

I am been trying to get AWS IoT working and just keep hitting problems, errors and not getting anywhere. I am trying to use the AWS IoT basicPubSub.py script to test the connection, but getting an error:
ssl.SSLError: unknown error (_ssl.c:3946)
I have been through all the certificates several times, but want to check/fully understand if I can pull the rootCAFile, certfile and privatekey from the command line utility and/or from the IAM interface? I have download each piece of information and stored in local files.
python basicPubSub.py -e <endpoint> -r <rootCAFilePath> -c <certFilePath> -k <privateKeyFilePath>
The main aim is just to ensure everything is correct or I have another problem something else? Is there a way to test each certificate to ensure each file is correct and has the right information?
I am not sure how I managed to fix this problem, I tried the following items to fix the problem:
Re-created all the certificates
Re-installated CLI using sudo
Installed ssl (sudo apt-get install -y libssl-dev)
I going to do a fresh installation on my RPi and repeat the steps to understand how this was resolved and fixed.

How do I update kernel-utils?

Brace yourself, I'm a Windows admin messing with a CentOS 6 server.
Let's start by saying I know very little about Linux.
I'm trying to load an rmmagent, GFI/MaxFocus's agent. It's failing the dependency check on kernel-utils and unzip.
error: Failed dependencies:
kernel-utils is needed by rmmagent-1.0.2.centos6-1.2.x86_64
unzip is needed by rmmagent-1.0.2.centos6-1.2.x86_64
I Googled myself to death, but I think I just don't know enough about Linux to make this go.
Can someone educate me or point me to the right place to learn how to do this? Thanks!
-Jeff
PS: I got unzip installed without issue.
We had the same issue. We spoke to the LogicNow support and they give us this solution:
wget -c ftp://rpmfind.net/linux/Mandriva/official/9.1/i586/Mandrake/RPMS/ksymoops-2.4.8-1mdk.i586.rpm
yum install ksymoops-2.4.8-1mdk.i586.rpm

Adding Support for SCP and SFTP for Curl on Linux

I've been been desperately trying to add SFTP and SCP support for Curl on my CentOS box. I found something resembling a solution here:
http://andrewberls.com/blog/post/adding-sftp-support-to-curl
I followed these steps but found that when attempting to get a file via both SCP and SFTP, the connection hangs once the file has been found. I cannot fix this and cannot find an alternative solution.
I have to use Curl for a job at work and therefore cannot use another lib. Has anyone managed to successfully add support for SCP and SFTP on Curl? I have a test server setup and other protocols such as FTP work as expected.
Any help would be greatly appreciated!
Thanks in advance,
Peter
Although Curl does support SFTP, support isn't automatically included in the default package.
This website: http://andrewberls.com/blog/post/adding-sftp-support-to-curl provided the details which helped me add the required support for SFTP. As the site didn't work 100% for me, I've outlined the different steps taken below.
Manually downloading libssh2 didn't work for me so I used yum to install the two packages:
yum install libssh2 libssh2-devel
and then followed step two configuring Curl to install using the above libraries
The final step was to restart sshd:
service sshd restart
There you have it. Double check that SFTP is on the list of support protocols by running
curl -V
When I initially tested, Curl complained about key authentication issues, but you can force Curl to use any authentication to connect:
curl --anyauth sftp://user:passwd#127.0.0.1/directory -o Test.txt
This will round robin the different supported authentication methods and let you use you login credentials instead.
I hope this helps alleviate any other headaches for people trying to achieve the same.

cppcms - Shared library - Linux

I am trying to use the cppcms framework on Linux(Debian distribution).
I followed the steps described in the Build tutorial on the site and then tried to build the hello world application.
I have successfully compiled the source, but when I try to run it I get the following error:
./hello: error while loading shared libraries: libcppcms.so.1: cannot open shared object file: No such file or directory
I am relatively new to Linux so I had to a little research and come across these things called Shared Libraries. As I understood, these *.so files are exactly what I was needing to create.
I also read that the base folder for libraries was /home/usr/lib so I tried copying the file onto that folder, but it didn't help.
I would really appreciate any help that might get me through this problem.
Thank you!
I was able to recover from this problem by executing "sudo ldconfig"
Also this worked out for me:
export LD_LIBRARY_PATH=/path/to/library/
./hello -c config.js
where "/path/to/library/" is the actual directory where libcppcms.so.1
lives. (mine was /usr/local/lib/)
[got it from http://comments.gmane.org/gmane.comp.lib.cppcms.user/764 ]
Instead of building CppCMS on your own, install ready to use deb: http://cppcms.com/wikipp/en/page/apt#Apt-Get.Repositories
You can use the troubleshooting guide that the problem you are talking about was mentioned: http://cppcms.com/wikipp/en/page/cppcms_1x_build_troubleshooting#My.sample.application.does.not.find.the.shared.object..code.libcppcms.so..code..when.I.try.to.run.it.

Resources