ykcs11 doesn't install p11-kit module file

[dwmw2]

When I use OpenSC with my Yubikey PIV, the distribution package of OpenSC installs a .module file which ensures that opensc-pkcs11.so is loaded into any well-behaved applications automatically.

So I can use the PKCS#11 URI 'pkcs11:manufacturer=piv_II;id=%01' with any application in place of a filename for a cert/key, and expect it to work.

That does require that the PKCS#11 module be installed correctly with a p11-kit .module file though...

[qpernil]

I'm not very familiar with p11-kit, if you have such a module config file I'd appreciate the contribution. Do you see anything aside of the config file that would be needed ? One thing that pops to mind is the different shared library suffixes on Linux an MacOS.

[ee987]

@qpernil see https://p11-glue.github.io/p11-glue/p11-kit/manual/pkcs11-conf.html

[sigv]

You just need a /usr/share/p11-kit/modules/ykcs11.module file. At its most minimal configuration:

# https://p11-glue.github.io/p11-glue/p11-kit/manual/pkcs11-conf.html
module: /usr/lib/x86_64-linux-gnu/libykcs11.so

---

It is also possible to symlink /usr/lib/x86_64-linux-gnu/pkcs11/libykcs11.so to ../libykcs11.so.
In that case the module path provided can be a relative one - simply libykcs11.so.