Where we find the PKCS#11 config file? about pyhanko HOT 3 CLOSED

Hi,

The PKCS#11 config is part of the main YAML configuration file, and pkcs11-setups is a top-level key in the YAML structure. By default, pyHanko looks for configuration in pyhanko.yml in the current directory, but you can customise that if you want. Details are explained here in the documentation.

Do note that PKCS#11 configuration is a new feature for 0.7.0, which hasn't been released yet. This means that you have to install pyHanko from this repository; if you're running the latest version from PyPI: that's the reason why it doesn't work. :)

from pyhanko.

Thank you...

But now, I am sticking to another problem that the value of the module path. In windows, I have successfully singed by ePass2003Auto using the path C:\WINDOWS\system32\eps2003csp11v2.dll. But can not find the lib/so file in the Ubuntu platform, that's why I can not sign.

I have listed out all the driver and reader lists using the opensc-tool and it shows the epass2003 driver already installed and the reader detected also...

satanu@nexstgo:~$ opensc-tool --list-drivers
Configured card drivers:
.......................
  entersafe        entersafe
  epass2003        epass2003         <---------------------------
  rutoken          Rutoken driver
.......................
satanu@nexstgo:~$ opensc-tool --list-readers
# Detected readers (pcsc)
Nr.  Card  Features  Name
0    Yes             FT ePass2003Auto 00 00

Please help me with the module path for the Ubuntu Platform.

from pyhanko.

Hi,

I certainly don't know all PKCS#11 implementations out there, but I believe OpenSC exposes a PKCS#11 interface through all its drivers using the same PKCS#11 module (i.e. the same .so file). The package is probably named opensc-pkcs11 or something of that nature; looking at the file list for that package on your system should answer that question.

That said, I'm not an OpenSC expert, and I certainly don't know how the epass2003 driver interacts with it, so you should address further questions (slot number, token label, etc.) through your HSM provider's support channels, or have a look at the OpenSC wiki. These things vary from platform to platform.

I'll close this issue now, but if you run into any pyHanko-specific problems, feel free to reopen it later.

from pyhanko.