Comments on: DNSSEC with BIND 9.10 and native PKCS#11 https://arunns.net/dnssec-with-bind-9-10-and-native-pkcs11/ Arun's blog Wed, 02 Nov 2016 09:16:33 +0000 hourly 1 https://wordpress.org/?v=6.4.1 By: Arun Natarajan https://arunns.net/dnssec-with-bind-9-10-and-native-pkcs11/#comment-104 Wed, 02 Nov 2016 09:16:33 +0000 http://arunnsblog.com/?p=849#comment-104 In reply to Rolf Sommerhalder.

Thanks for the suggestion, updated the post.

]]> By: Arun Natarajan https://arunns.net/dnssec-with-bind-9-10-and-native-pkcs11/#comment-103 Wed, 02 Nov 2016 09:14:07 +0000 http://arunnsblog.com/?p=849#comment-103 In reply to Rolf Sommerhalder.

Thanks! you are right, it was hard to notice the trailing space.

]]> By: Rolf Sommerhalder https://arunns.net/dnssec-with-bind-9-10-and-native-pkcs11/#comment-102 Thu, 18 Aug 2016 08:36:49 +0000 http://arunnsblog.com/?p=849#comment-102 Further, it is worth mentioning, that there must not be any trailing (white space) characters after the PIN in /etc/token_pin, e.g. use for example:
# echo -n “1234” > /etc/token_pin
and check:
# hexdump /etc/token_pin
0000000 3231 3433
0000004

Because otherwise, I ran into the same error as you did:
“pk11.c:649: fatal error: pkcs_C_Login: Error = 0x000000A0”
http://bind-users-forum.2342410.n4.nabble.com/dnssec-keyfromlabel-pkcs11-label-format-td1382.html

]]> By: Rolf Sommerhalder https://arunns.net/dnssec-with-bind-9-10-and-native-pkcs11/#comment-101 Thu, 18 Aug 2016 06:09:24 +0000 http://arunnsblog.com/?p=849#comment-101 Thanks for your concise, informative blog entry.

Most likely you also had installed bind-pkcs11-utils in order to get the dnssec-*-pkcs11 tools.

Maybe you want to add it as a fourth package in your second paragraph “dnf install … bind-pkcs11-utils”.

Regards

]]>