vesajaaskelainen
commented
10 months ago Let's try to tackle 'session_new(): Error: 0x000000B1; Max sessions (-1) exceeded' first as that sound good starting point.
If I would have 32 bit machine then I suppose I would not even see this.
OP-TEE's PKCS#11 TA operates in 32 bit parameter passing mode. Eg. if your REE OS is 32 bit then you don't see a thing but if REE OS is 64bit then with CK_ULONG one may need to sign extend 32 bit value to 64 bit.
Here is one try to tackle C_GetTokenInfo()'s CK_ULONG for ulMaxSessionCount (and friends):
https://github.com/OP-TEE/optee_client/commit/edeb46a7beeda838c2c259b883dece12598b411b
With this change I we do get out of infinite loop problem. (thou I suppose one should fix the infinite loop problem within pkcs11-provider.)
A bit further:
root@qemuarm64-secureboot:~# openssl pkey -propquery provider=pkcs11 -provider pkcs11 -in "pkcs11:token=${PKCS11_TOKEN};object=myECkey;type=public?pin-value=${PKCS11_USER_PIN}" -pubin -pubout -out /tmp/myECkey.pem
root@qemuarm64-secureboot:~# cat /tmp/myECkey.pem
root@qemuarm64-secureboot:~# ls -la /tmp/myECkey.pem
-rw-r--r-- 1 root root 0 Nov 25 17:24 /tmp/myECkey.pemThou not the expected result.
If I add:
pkcs11-module-allow-export = 1That does not seem to have an effect either.
Here are some log snippets:
[../../../../../../../workspace/sources/pkcs11-provider/src/random.c:85] p11prov_rand_generate(): rand: generate (add bytes: 0)
[../../../../../../../workspace/sources/pkcs11-provider/src/session.c:765] p11prov_get_session(): Get session on slot 18446744073709551615, reqlogin=false, rw=false
[../../../../../../../workspace/sources/pkcs11-provider/src/session.c:798] p11prov_get_session(): cycle through available slots
[../../../../../../../workspace/sources/pkcs11-provider/src/session.c:494] check_slot(): Checking Slot id=0, uri=(nil), mechtype=ffffffffffffffff, rw=false)
[../../../../../../../workspace/sources/pkcs11-provider/src/session.c:834] p11prov_get_session(): Found a slot 0
[../../../../../../../workspace/sources/pkcs11-provider/src/session.c:266] session_new(): Creating new P11PROV_SESSION session on pool 0x5562511b00
[../../../../../../../workspace/sources/pkcs11-provider/src/session.c:300] session_new(): Total sessions: 1
[../../../../../../../workspace/sources/pkcs11-provider/src/interface.gen.c:214] p11prov_OpenSession(): Calling C_OpenSession
[../../../../../../../workspace/sources/pkcs11-provider/src/session.c:73] token_session_open(): C_OpenSession ret:0 (session: 1)
[../../../../../../../workspace/sources/pkcs11-provider/src/interface.gen.c:253] p11prov_GetSessionInfo(): Calling C_GetSessionInfo
[../../../../../../../workspace/sources/pkcs11-provider/src/interface.gen.c:883] p11prov_GenerateRandom(): Calling C_GenerateRandom
[../../../../../../../workspace/sources/pkcs11-provider/src/util.c:554] p11prov_parse_uri(): ctx=0x556250dc70 uri=pkcs11:token=device;object=myECkey;type=public?pin-value=1234)
[../../../../../../../workspace/sources/pkcs11-provider/src/util.c:360] parse_utf8str(): String [device] -> [device]
[../../../../../../../workspace/sources/pkcs11-provider/src/util.c:360] parse_utf8str(): String [myECkey] -> [myECkey]
[../../../../../../../workspace/sources/pkcs11-provider/src/util.c:360] parse_utf8str(): String [public] -> [public]
[../../../../../../../workspace/sources/pkcs11-provider/src/util.c:360] parse_utf8str(): String [1234] -> [1234]
[../../../../../../../workspace/sources/pkcs11-provider/src/store.c:494] p11prov_store_set_ctx_params(): set ctx params (0x5562534450, 0x7ff11ff768)
[../../../../../../../workspace/sources/pkcs11-provider/src/store.c:494] p11prov_store_set_ctx_params(): set ctx params (0x5562534450, 0x7ff11ff978)
[../../../../../../../workspace/sources/pkcs11-provider/src/store.c:418] p11prov_store_eof(): store eof (0x5562534450)
[../../../../../../../workspace/sources/pkcs11-provider/src/store.c:418] p11prov_store_eof(): store eof (0x5562534450)
[../../../../../../../workspace/sources/pkcs11-provider/src/store.c:250] p11prov_store_load(): store load (0x5562534450)
[../../../../../../../workspace/sources/pkcs11-provider/src/store.c:92] store_fetch(): called (store_ctx=0x5562534450)
[../../../../../../../workspace/sources/pkcs11-provider/src/provider.c:590] p11prov_ctx_login_behavior(): login_behavior = 0
[../../../../../../../workspace/sources/pkcs11-provider/src/session.c:765] p11prov_get_session(): Get session on slot 18446744073709551615, reqlogin=false, rw=false
[../../../../../../../workspace/sources/pkcs11-provider/src/session.c:798] p11prov_get_session(): cycle through available slots
[../../../../../../../workspace/sources/pkcs11-provider/src/session.c:494] check_slot(): Checking Slot id=0, uri=0x5562511d50, mechtype=ffffffffffffffff, rw=false)
[../../../../../../../workspace/sources/pkcs11-provider/src/session.c:834] p11prov_get_session(): Found a slot 0
[../../../../../../../workspace/sources/pkcs11-provider/src/interface.gen.c:253] p11prov_GetSessionInfo(): Calling C_GetSessionInfo
[../../../../../../../workspace/sources/pkcs11-provider/src/objects.c:930] p11prov_obj_find(): Find objects [class=2, id-len=0, label=myECkey]
[../../../../../../../workspace/sources/pkcs11-provider/src/interface.gen.c:445] p11prov_FindObjectsInit(): Calling C_FindObjectsInit
[../../../../../../../workspace/sources/pkcs11-provider/src/interface.gen.c:467] p11prov_FindObjects(): Calling C_FindObjects
[../../../../../../../workspace/sources/pkcs11-provider/src/interface.gen.c:467] p11prov_FindObjects(): Calling C_FindObjects
[../../../../../../../workspace/sources/pkcs11-provider/src/interface.gen.c:487] p11prov_FindObjectsFinal(): Calling C_FindObjectsFinal
[../../../../../../../workspace/sources/pkcs11-provider/src/util.c:23] p11prov_fetch_attributes(): Fetching attributes (0): 0x00000000
[../../../../../../../workspace/sources/pkcs11-provider/src/util.c:23] p11prov_fetch_attributes(): Fetching attributes (1): 0x00000100
[../../../../../../../workspace/sources/pkcs11-provider/src/util.c:23] p11prov_fetch_attributes(): Fetching attributes (2): 0x00000171
[../../../../../../../workspace/sources/pkcs11-provider/src/util.c:23] p11prov_fetch_attributes(): Fetching attributes (3): 0x00000001
[../../../../../../../workspace/sources/pkcs11-provider/src/interface.gen.c:404] p11prov_GetAttributeValue(): Calling C_GetAttributeValue
[../../../../../../../workspace/sources/pkcs11-provider/src/util.c:65] p11prov_fetch_attributes(): Attribute| type:0x00000000 value:0x5562536430, len:8
[../../../../../../../workspace/sources/pkcs11-provider/src/util.c:65] p11prov_fetch_attributes(): Attribute| type:0x00000100 value:0x5562536448, len:8
[../../../../../../../workspace/sources/pkcs11-provider/src/util.c:65] p11prov_fetch_attributes(): Attribute| type:0x00000171 value:0x5562536440, len:1
[../../../../../../../workspace/sources/pkcs11-provider/src/util.c:65] p11prov_fetch_attributes(): Attribute| type:0x00000001 value:0x5562536441, len:1
[../../../../../../../workspace/sources/pkcs11-provider/src/util.c:23] p11prov_fetch_attributes(): Fetching attributes (0): 0x00000180
[../../../../../../../workspace/sources/pkcs11-provider/src/util.c:23] p11prov_fetch_attributes(): Fetching attributes (1): 0x00000181
[../../../../../../../workspace/sources/pkcs11-provider/src/util.c:23] p11prov_fetch_attributes(): Fetching attributes (2): 0x00000102
[../../../../../../../workspace/sources/pkcs11-provider/src/util.c:23] p11prov_fetch_attributes(): Fetching attributes (3): 0x00000003
[../../../../../../../workspace/sources/pkcs11-provider/src/interface.gen.c:404] p11prov_GetAttributeValue(): Calling C_GetAttributeValue
[../../../../../../../workspace/sources/pkcs11-provider/src/util.c:61] p11prov_fetch_attributes(): (Re)Fetching 4 attributes
[../../../../../../../workspace/sources/pkcs11-provider/src/interface.gen.c:404] p11prov_GetAttributeValue(): Calling C_GetAttributeValue
[../../../../../../../workspace/sources/pkcs11-provider/src/util.c:65] p11prov_fetch_attributes(): Attribute| type:0x00000180 value:0x5562520530, len:10
[../../../../../../../workspace/sources/pkcs11-provider/src/util.c:65] p11prov_fetch_attributes(): Attribute| type:0x00000181 value:0x5562512970, len:67
[../../../../../../../workspace/sources/pkcs11-provider/src/util.c:65] p11prov_fetch_attributes(): Attribute| type:0x00000102 value:0x55625209c0, len:0
[../../../../../../../workspace/sources/pkcs11-provider/src/util.c:65] p11prov_fetch_attributes(): Attribute| type:0x00000003 value:0x55625212d0, len:7
[../../../../../../../workspace/sources/pkcs11-provider/src/util.c:23] p11prov_fetch_attributes(): Fetching attributes (0): 0x40000600
[../../../../../../../workspace/sources/pkcs11-provider/src/interface.gen.c:404] p11prov_GetAttributeValue(): Calling C_GetAttributeValue
[../../../../../../../workspace/sources/pkcs11-provider/src/interface.gen.c:408] p11prov_GetAttributeValue(): Error: 0x00000012; Error returned by C_GetAttributeValue
[../../../../../../../workspace/sources/pkcs11-provider/src/provider.c:382] p11prov_ctx_set_quirk(): Set quirk 'sup_attr_CKA_ALLOWED_MECHANISMS' of size 1
[../../../../../../../workspace/sources/pkcs11-provider/src/objects.c:1011] p11prov_obj_find(): Find objects: found 1 objects; Returning 0
[../../../../../../../workspace/sources/pkcs11-provider/src/session.c:765] p11prov_get_session(): Get session on slot 1, reqlogin=false, rw=false
[../../../../../../../workspace/sources/pkcs11-provider/src/session.c:798] p11prov_get_session(): cycle through available slots
[../../../../../../../workspace/sources/pkcs11-provider/src/session.c:494] check_slot(): Checking Slot id=1, uri=0x5562511d50, mechtype=ffffffffffffffff, rw=false)
[../../../../../../../workspace/sources/pkcs11-provider/src/session.c:494] check_slot(): Checking Slot id=2, uri=0x5562511d50, mechtype=ffffffffffffffff, rw=false)
[../../../../../../../workspace/sources/pkcs11-provider/src/store.c:126] store_fetch(): Failed to get session to load keys (slotid=1, ret=e0)
[../../../../../../../workspace/sources/pkcs11-provider/src/keymgmt.c:1208] p11prov_ec_load(): ec load 0x5562536410, 112
[../../../../../../../workspace/sources/pkcs11-provider/src/objects.c:400] p11prov_obj_ref_no_cache(): Ref Object: 0x5562536410 (handle:1)
[../../../../../../../workspace/sources/pkcs11-provider/src/keymgmt.c:1363] p11prov_ec_get_params(): ec get params 0x5562536410
[../../../../../../../workspace/sources/pkcs11-provider/src/keymgmt.c:1216] p11prov_ec_has(): ec has 0x5562536410 1
[../../../../../../../workspace/sources/pkcs11-provider/src/keymgmt.c:1216] p11prov_ec_has(): ec has 0x5562536410 2
[../../../../../../../workspace/sources/pkcs11-provider/src/store.c:433] p11prov_store_close(): store close (0x5562534450)
[../../../../../../../workspace/sources/pkcs11-provider/src/store.c:34] p11prov_store_ctx_free(): store ctx free (0x5562534450)
[../../../../../../../workspace/sources/pkcs11-provider/src/objects.c:431] p11prov_obj_free(): Free Object: 0x5562536410 (handle:1)
[../../../../../../../workspace/sources/pkcs11-provider/src/objects.c:438] p11prov_obj_free(): object free: reference held
[../../../../../../../workspace/sources/pkcs11-provider/src/keymgmt.c:1202] p11prov_ec_free(): ec free 0x5562536410
[../../../../../../../workspace/sources/pkcs11-provider/src/objects.c:431] p11prov_obj_free(): Free Object: 0x5562536410 (handle:1)
[../../../../../../../workspace/sources/pkcs11-provider/src/session.c:154] p11prov_session_pool_free(): Freeing session pool 0x5562511b00
[../../../../../../../workspace/sources/pkcs11-provider/src/session.c:351] session_free(): Session Free 0x55625343d0
[../../../../../../../workspace/sources/pkcs11-provider/src/session.c:102] token_session_close(): Closing session 1
[../../../../../../../workspace/sources/pkcs11-provider/src/interface.gen.c:233] p11prov_CloseSession(): Calling C_CloseSession
[../../../../../../../workspace/sources/pkcs11-provider/src/objects.c:96] p11prov_obj_pool_free(): Freeing object pool 0x5562520400
[../../../../../../../workspace/sources/pkcs11-provider/src/session.c:154] p11prov_session_pool_free(): Freeing session pool 0x5562510340
[../../../../../../../workspace/sources/pkcs11-provider/src/objects.c:96] p11prov_obj_pool_free(): Freeing object pool 0x55625366c0
[../../../../../../../workspace/sources/pkcs11-provider/src/session.c:154] p11prov_session_pool_free(): Freeing session pool 0x556250e8a0
[../../../../../../../workspace/sources/pkcs11-provider/src/objects.c:96] p11prov_obj_pool_free(): Freeing object pool 0x55625211e0
[../../../../../../../workspace/sources/pkcs11-provider/src/interface.gen.c:31] p11prov_Finalize(): Calling C_Finalize
simo5
Describe the bug I am trying to use pkcs11-provider instead of libp11's engine with OP-TEE's PKCS#11 Trusted Application.
I though that let's start with something simple like exporting public key to filesystem but that didn't get too far as we have infinite loop within pkcs11-provider code.
To Reproduce Steps to reproduce the behavior:
[ openssl_init ] providers = provider_sect
[ provider_sect ] default = default_sect pkcs11 = pkcs11_sect
[ default_sect ]
activate = 1
[ pkcs11_sect ] module = /usr/lib/ossl-modules/pkcs11.so pkcs11-module-path = /usr/lib/libckteec.so.0
Note: using PIN authentication just to rule that out
root@qemuarm64-secureboot:~# export PKCS11_MODULE=/usr/lib/libckteec.so.0 root@qemuarm64-secureboot:~# export PKCS11_SLOT=0 root@qemuarm64-secureboot:~# export PKCS11_TOKEN=device root@qemuarm64-secureboot:~# export PKCS11_SO_PIN=1234567890 root@qemuarm64-secureboot:~# export PKCS11_USER_PIN=1234 root@qemuarm64-secureboot:~# export PKCS11_OBJECT_ID=112233 root@qemuarm64-secureboot:~# export PKCS11_OBJECT_LABEL=myImportedKey root@qemuarm64-secureboot:~# root@qemuarm64-secureboot:~# export PKCS11_EC_OBJECT_ID=223344 root@qemuarm64-secureboot:~# export PKCS11_EC_OBJECT_LABEL=myECImportedKey root@qemuarm64-secureboot:~# root@qemuarm64-secureboot:~# export PKCS11_ED_OBJECT_ID=5566777 root@qemuarm64-secureboot:~# export PKCS11_ED_OBJECT_LABEL=myEDImportedKey root@qemuarm64-secureboot:~# root@qemuarm64-secureboot:~# export PKCS11_PROVIDER_DEBUG=file:/run/pkcs11-provider.log,level:2 root@qemuarm64-secureboot:~# pkcs11-tool --module ${PKCS11_MODULE} --slot-index ${PKCS11_SLOT} --init-token --label ${PKCS11_TOKEN} --so-pin ${PKCS11_SO_PIN} Using slot with index 0 (0x0) Token successfully initialized root@qemuarm64-secureboot:~# root@qemuarm64-secureboot:~# pkcs11-tool --module ${PKCS11_MODULE} --slot-index ${PKCS11_SLOT} --init-pin --login --so-pin ${PKCS11_SO_PIN} --new-pin ${PKCS11_USER_PIN} Using slot with index 0 (0x0) User PIN successfully initialized root@qemuarm64-secureboot:~# root@qemuarm64-secureboot:~# pkcs11-tool --module ${PKCS11_MODULE} --list-slots Available slots: Slot 0 (0x0): OP-TEE PKCS11 TA - TEE UUID 94e9ab89-4c43-56ea-8b35-45dc07226830 token label : device token manufacturer : Linaro token model : OP-TEE TA token flags : login required, rng, token initialized, PIN initialized hardware version : 0.0 firmware version : 0.1 serial num : 0000000000000000 pin min/max : 4/128 Slot 1 (0x1): OP-TEE PKCS11 TA - TEE UUID 94e9ab89-4c43-56ea-8b35-45dc07226830 token state: uninitialized Slot 2 (0x2): OP-TEE PKCS11 TA - TEE UUID 94e9ab89-4c43-56ea-8b35-45dc07226830 token state: uninitialized root@qemuarm64-secureboot:~# root@qemuarm64-secureboot:~# pkcs11-tool --module ${PKCS11_MODULE} --token ${PKCS11_TOKEN} --login --pin ${PKCS11_USER_PIN} --list-objects
root@qemuarm64-secureboot:~# pkcs11-tool --module ${PKCS11_MODULE} --token ${PKCS11_TOKEN} --login --pin ${PKCS11_USER_PIN} --keypairgen --key-type EC:prime256v1 --label myECkey Key pair generated: Private Key Object; EC label: myECkey Usage: sign, derive Access: sensitive, always sensitive, never extractable, local Public Key Object; EC EC_POINT 256 bits EC_POINT: 04410470bebfe9bc46b49bab19720ebc3cbd312d3f22a750c95a446d71f95e8aae3b7e7caa16888bc9c97ca15bdfea56f856547c964dbe9f7749ca6c490e1a47f82579 EC_PARAMS: 06082a8648ce3d030107 label: myECkey Usage: verify, derive Access: local
root@qemuarm64-secureboot:~# openssl pkey -propquery provider=pkcs11 -provider pkcs11 -in "pkcs11:token=${PKCS11_TOKEN};object=myECkey;type=public?pin-value=${PKCS11_USER_PIN}" -pubin -pubout -out /tmp/myECkey.pem
infine loop in here -- aborted with CTRL-C
^C
... [../../../../../../../workspace/sources/pkcs11-provider/src/random.c:85] p11prov_rand_generate(): rand: generate (add bytes: 0) [../../../../../../../workspace/sources/pkcs11-provider/src/session.c:765] p11prov_get_session(): Get session on slot 18446744073709551615, reqlogin=false, rw=false [../../../../../../../workspace/sources/pkcs11-provider/src/session.c:798] p11prov_get_session(): cycle through available slots [../../../../../../../workspace/sources/pkcs11-provider/src/session.c:494] check_slot(): Checking Slot id=0, uri=(nil), mechtype=ffffffffffffffff, rw=false) [../../../../../../../workspace/sources/pkcs11-provider/src/session.c:834] p11prov_get_session(): Found a slot 0 [../../../../../../../workspace/sources/pkcs11-provider/src/session.c:266] session_new(): Creating new P11PROV_SESSION session on pool 0x55745c1b00 [../../../../../../../workspace/sources/pkcs11-provider/src/session.c:270] session_new(): Error: 0x000000B1; Max sessions (-1) exceeded [../../../../../../../workspace/sources/pkcs11-provider/src/util.c:554] p11prov_parse_uri(): ctx=0x55745bdc70 uri=pkcs11:token=device;object=myECkey;type=public?pin-value=1234) [../../../../../../../workspace/sources/pkcs11-provider/src/util.c:360] parse_utf8str(): String [device] -> [device] [../../../../../../../workspace/sources/pkcs11-provider/src/util.c:360] parse_utf8str(): String [myECkey] -> [myECkey] [../../../../../../../workspace/sources/pkcs11-provider/src/util.c:360] parse_utf8str(): String [public] -> [public] [../../../../../../../workspace/sources/pkcs11-provider/src/util.c:360] parse_utf8str(): String [1234] -> [1234] [../../../../../../../workspace/sources/pkcs11-provider/src/store.c:494] p11prov_store_set_ctx_params(): set ctx params (0x55745e47e0, 0x7ff8ac4278) [../../../../../../../workspace/sources/pkcs11-provider/src/store.c:494] p11prov_store_set_ctx_params(): set ctx params (0x55745e47e0, 0x7ff8ac4488) [../../../../../../../workspace/sources/pkcs11-provider/src/store.c:418] p11prov_store_eof(): store eof (0x55745e47e0) [../../../../../../../workspace/sources/pkcs11-provider/src/store.c:418] p11prov_store_eof(): store eof (0x55745e47e0) [../../../../../../../workspace/sources/pkcs11-provider/src/store.c:250] p11prov_store_load(): store load (0x55745e47e0) [../../../../../../../workspace/sources/pkcs11-provider/src/store.c:92] store_fetch(): called (store_ctx=0x55745e47e0) [../../../../../../../workspace/sources/pkcs11-provider/src/provider.c:590] p11prov_ctx_login_behavior(): login_behavior = 0 [../../../../../../../workspace/sources/pkcs11-provider/src/session.c:765] p11prov_get_session(): Get session on slot 18446744073709551615, reqlogin=false, rw=false [../../../../../../../workspace/sources/pkcs11-provider/src/session.c:798] p11prov_get_session(): cycle through available slots [../../../../../../../workspace/sources/pkcs11-provider/src/session.c:494] check_slot(): Checking Slot id=0, uri=0x55745c1d50, mechtype=ffffffffffffffff, rw=false) [../../../../../../../workspace/sources/pkcs11-provider/src/session.c:834] p11prov_get_session(): Found a slot 0 [../../../../../../../workspace/sources/pkcs11-provider/src/session.c:266] session_new(): Creating new P11PROV_SESSION session on pool 0x55745c1b00 [../../../../../../../workspace/sources/pkcs11-provider/src/session.c:270] session_new(): Error: 0x000000B1; Max sessions (-1) exceeded [../../../../../../../workspace/sources/pkcs11-provider/src/store.c:126] store_fetch(): Failed to get session to load keys (slotid=0, ret=b1) [../../../../../../../workspace/sources/pkcs11-provider/src/session.c:765] p11prov_get_session(): Get session on slot 0, reqlogin=false, rw=false [../../../../../../../workspace/sources/pkcs11-provider/src/session.c:798] p11prov_get_session(): cycle through available slots [../../../../../../../workspace/sources/pkcs11-provider/src/session.c:494] check_slot(): Checking Slot id=0, uri=0x55745c1d50, mechtype=ffffffffffffffff, rw=false) [../../../../../../../workspace/sources/pkcs11-provider/src/session.c:834] p11prov_get_session(): Found a slot 0 [../../../../../../../workspace/sources/pkcs11-provider/src/session.c:266] session_new(): Creating new P11PROV_SESSION session on pool 0x55745c1b00 [../../../../../../../workspace/sources/pkcs11-provider/src/session.c:270] session_new(): Error: 0x000000B1; Max sessions (-1) exceeded [../../../../../../../workspace/sources/pkcs11-provider/src/store.c:126] store_fetch(): Failed to get session to load keys (slotid=0, ret=b1) [../../../../../../../workspace/sources/pkcs11-provider/src/session.c:765] p11prov_get_session(): Get session on slot 0, reqlogin=false, rw=false [../../../../../../../workspace/sources/pkcs11-provider/src/session.c:798] p11prov_get_session(): cycle through available slots [../../../../../../../workspace/sources/pkcs11-provider/src/session.c:494] check_slot(): Checking Slot id=0, uri=0x55745c1d50, mechtype=ffffffffffffffff, rw=false) [../../../../../../../workspace/sources/pkcs11-provider/src/session.c:834] p11prov_get_session(): Found a slot 0 [../../../../../../../workspace/sources/pkcs11-provider/src/session.c:266] session_new(): Creating new P11PROV_SESSION session on pool 0x55745c1b00 [../../../../../../../workspace/sources/pkcs11-provider/src/session.c:270] session_new(): Error: 0x000000B1; Max sessions (-1) exceeded [../../../../../../../workspace/sources/pkcs11-provider/src/store.c:126] store_fetch(): Failed to get session to load keys (slotid=0, ret=b1) ...