SparkLabs Forum.

Community Help.


Viscosity 1.7.14 with OpenSC 0.19 CKR_USER_NOT_LOGGED_IN

Hello,

Using the latest version of Viscosity with OpenSC 0.19.

I have client certificates stored in slots 9A and 9C on a YubiKey. Up until version 1.7.12, I was able to connect using certs in either slot. After upgrading I can detect and select the certificate in slot 9C, but when I try to connect, I get "Method C_Sign returned CKR_USER_NOT_LOGGED_IN".

Do you have any advice on how to solve this problem?

Thanks!
Al
Hi Al,

OpenVPN as of Viscosity 1.7.13 and on wards now ships with a 64-bit OpenVPN binary for x64 systems. This means supporting libraries, like PKCS#11 libraries, will now need to be 64-bit also, you would have needed 32-bit in the past.

I'm afraid we weren't aware that you could use 9c for PKCS#11, the spec from Yubikey seems to indicate only 9a can be used. I'm getting exactly the same behaviour as you though with OpenSC 0.19. Viscosity is doing everything right, it seems to be OpenSC that is having the issue.

However, downgrading to OpenSC 0.16 has resolved the issue for me, I uninstalled 0.19 and grabbed the OpenSC-0.16.0-win64_vs12-Release.msi package here - https://github.com/OpenSC/OpenSC/releases/tag/0.16.0

and used the dll here after installing as - "C:\WINDOWS\System32\opensc-pkcs11.dll"

Please give this a try and let us know how you get on.

We'll try and make some time to dig into OpenSC and see if we can find out what is going on with the latest version. Unfortunately this isn't the first oddness we've encountered with OpenSC.

Regards,
Eric
Hello Eric,

Yes! That worked. Thanks much for the quick solution!

Cheers,
Al
Hello Team

Viscosity current version is not working with Yubi key .

Thanks
Vishal
Hi Vishal,

We will need some more information. Could you please post a complete copy of your log after the problem occurs - https://sparklabs.com/support/kb/articl ... envpn-log/

Regards,
Eric
5 posts Page 1 of 1

Copyright © 2016 SparkLabs Pty Ltd. All Rights Reserved. Privacy Policy