Arch Linux User Repository

I had a similar issue. Using the git version worked.

Tests didn't build for me, I had to set --enable-testcases=no.

Error message:

libtool: link: gcc -I./usr/include -I./usr/lib/common -I./testcases/include -I./testcases/common -I./testcases/login -I./testcases/crypto -I./testcases/misc_tests -I./testcases/pkcs11 -march=x86-64 -mtune=generic -O2 -pipe -fno-plt -fgnu-tm -DPKCS64 -D_XOPEN_SOURCE=600 -Wall -Wextra -DCONFIG_PATH=\"/var/lib/opencryptoki\" -DSBIN_PATH=\"/usr/bin\" -DLIB_PATH=\"/usr/lib\" -DLOCKDIR_PATH=\"/var/lock/opencryptoki\" -DOCK_CONFDIR=\"/etc/opencryptoki\" -DOCK_LOGDIR=\"/var/log/opencryptoki\" -Wl,-O1 -Wl,--sort-common -Wl,--as-needed -Wl,-z -Wl,relro -Wl,-z -Wl,now -o testcases/login/login_flags_test usr/lib/common/testcases_login_login_flags_test-p11util.o testcases/login/login_flags_test-login_flags.o  testcases/common/.libs/libcommon.a -lc -ldl -lpthread -llber -lldap
/usr/bin/ld: testcases/common/.libs/libcommon.a(libcommon_la-common.o):(.bss+0x40): multiple definition of `funcs'; testcases/login/login_flags_test-login_flags.o:(.bss+0x140): first defined here
/usr/bin/ld: testcases/common/.libs/libcommon.a(libcommon_la-common.o):(.bss+0x33): multiple definition of `skip_token_obj'; testcases/login/login_flags_test-login_flags.o:(.bss+0x133): first defined here
/usr/bin/ld: testcases/common/.libs/libcommon.a(libcommon_la-common.o):(.bss+0x32): multiple definition of `no_stop'; testcases/login/login_flags_test-login_flags.o:(.bss+0x132): first defined here
/usr/bin/ld: testcases/common/.libs/libcommon.a(libcommon_la-common.o):(.bss+0x31): multiple definition of `no_init'; testcases/login/login_flags_test-login_flags.o:(.bss+0x131): first defined here
/usr/bin/ld: testcases/common/.libs/libcommon.a(libcommon_la-common.o):(.bss+0x30): multiple definition of `securekey'; testcases/login/login_flags_test-login_flags.o:(.bss+0x130): first defined here
/usr/bin/ld: testcases/common/.libs/libcommon.a(libcommon_la-common.o):(.bss+0x38): multiple definition of `SLOT_ID'; testcases/login/login_flags_test-login_flags.o:(.bss+0x138): first defined here
collect2: error: ld returned 1 exit status

MAKEDEPENDS is also missing byacc.

IIRC flex is in the base-devel group, which is assumed to be present so its contents don't need to be explicitly listed as a makedep.

In build() stage, got this:

configure: error: 'flex' is missing on your system. Please install 'flex'.
==> ERROR: A failure occurred in build().
    Aborting...

Lines 65 and 66 in opencryptoki-3.11.1.tar.gz/src/configure.ac reflect this, and installing flex package fixes this. I guess a dependency has been forgotten?

I'm having filesystem permission problems when trying to use tpmtoken_init or pkcsconf as a non-root user (:pkcs11 member). <del>Shouldn't the subdirectories of /var/lib/opencryptoki be owned by root:pkcs11 instead of root:root?</del> <del>On second thought, it feels like opencryptoki is fine and the tpmtoken_* tools are supposed to be setuid or something?</del> No, that doesn't work either.

Thanks djgera!

I made some changes to this package, please apply it. Thanks.

* Remove install file and use sysusers.
* Remove libtool dependence (this is part of base-devel group)
* Fix indentation

https://gist.github.com/djgera/db5581afbd91851771429228d43ee711

Confirmed; I suspect this is due to an openssl change. I'll look into a possible workaround but ideally this would be fixed upstream.

Edit: This is fixed upstream and opencryptoki 3.7.0 builds fine.

For me, building fails with:

../common/sw_crypt.c: In function ‘sw_des3_cbc’:
../common/sw_crypt.c:312:2: error: unknown type name ‘des_key_schedule’
des_key_schedule des_key1;