c_initialize_ex() from the basic example returns an error

[E-genin]

Hi,

When trying to run the basic example in the readme file, the function call c_initialize_ex() returns the following error :
... configparser.NoSectionError: No section: 'Chrystoki2'

I am using Pyhton 3.9.2 on a windows machine

Thanks in advance

[astraw38]

It's looking for a section in the crystoki.ini that comes with LunaClient installations on Windows. Do other lunaclient binaries work? What is the content of the crystoki.ini? Regardless, you can specify an exact path to the shared lib by setting the environment variable CHRYSTOKI_CONF_DLL to the path to the lib.

[E-genin]

Thanks @astraw38 for the reply,

I created the environment variable CHRYSTOKI_CONF_DLL with the path to *.dll library of the PKCS_11 library, but I still get the same error.

For the crystoki.ini, could you specify where I can find it ?

[astraw38]

https://thalesdocs.com/gphsm/luna/7/docs/network/Content/install/client_install/config-file_summary.htm

And per the following code:

            #  depends on different product, lib path could be configured by pointing to path, or stored in a file
            dll_path = os.environ.get(CRYSTOKI_CONF_DLL, parse_chrystoki_conf())

It should never search in crystoki.ini if you set the envvar correctly.

[E-genin]

@astraw38 thanks for the reply,

So I added your suggestion and run the following script :

import os
from pycryptoki.default_templates import *
from pycryptoki.defines import *
from pycryptoki.key_generator import *
from pycryptoki.session_management import *
from pycryptoki.encryption import *
from pycryptoki.cryptoki.helpers import *


#  depends on different product, lib path could be configured by pointing to path, or stored in a file
dll_path = os.environ.get('CHRYSTOKI_CONF_DLL', parse_chrystoki_conf())

c_initialize_ex()

CHRYSTOKI_CONF_DLL being the env variable containing the path where the *.dll file is.

Somehow I still get the same issue :

It seems I am still unable to to prevent it from looking for that crystoki.ini file

[astraw38]

The code I copy/pasted is from pycryptoki (https://github.com/ThalesGroup/pycryptoki/blob/master/pycryptoki/cryptoki/helpers.py#L189), showing you how it works internally. If it's still reading from the config file, then you do not have the environment variables set. You can view envvars by just printing os.environ.

Again, check the link I pasted before for info about crystoki.ini.

[E-genin]

Thanks @astraw38 for the reply,

I checked that the env var is correctly set, what I noticed is that the parse_chrystoki_conf() is called even if the var is found (weird, right? ).

I had to change the line :

#  depends on different product, lib path could be configured by pointing to path, or stored in a file
dll_path = os.environ.get('CHRYSTOKI_CONF_DLL', parse_chrystoki_conf())

to :

#  depends on different product, lib path could be configured by pointing to path, or stored in a file
dll_path = os.environ.get('CHRYSTOKI_CONF_DLL)

Only then, the c_initialize_ex() worked, but I do get a general error now in:
pubkey, privkey = c_generate_key_pair_ex(auth_session, CKM_RSA_PKCS_KEY_PAIR_GEN, pub_template, priv_template)

[astraw38]

That session # is rather high - what HSM are you using? And do other tools like ckdemo work?

[E-genin]

I am using an HSM simulator from UTIMACO, I haven't tested yet with Luna as I am not familiar with the tool/environment (hence the absence of crystoki.ini) .

[astraw38]

I believe there's ways to demo DPOD? I can make no guarantees whatsosever about Utimaco HSMs & this project - there's a lot of Luna-specific handling. It's pretty close to pure P11, but I know defaults and a lot of constants are vendor-specific, and pretty much all CA_ functions would be purely luna-only.