tpm2-software / tpm2-pkcs11

A PKCS#11 interface for TPM2 hardware
https://tpm2-software.github.io
Other
278 stars 104 forks source link

Evolution takes a long time to start with tpm2-pkcs11 installed #834

Closed traxtopel closed 1 year ago

traxtopel commented 1 year ago

When I install tpm2-pkcs11 on Fedora 37 and start the Evolution application installed from RPM, I experience a delay of about 1 minute before the application fully starts up. Please see the warnings/errors below.

To reproduce the issue: Install tpm2-pkcs11 on Fedora 37 Install the Evolution RPM Start Evolution and note the startup time The delay of about 1 minute is observed.

A possible workaround for this issue is to use the flatpak version of Evolution, which does not exhibit this slow startup time problem.

If you have any ideas or hints on how to work around this issue, please let me know. The tpm2-abrmd is running and tpm2_pcrread shows no errors.

(evolution:67062): WARNING : 08:02:55.036: Failed to create connection with service: Timeout was reached ERROR:tcti:src/tss2-tcti/tctildr-dl.c:154:tcti_from_file() Could not initialize TCTI file: libtss2-tcti-tabrmd.so.0 WARNING:fapi:src/tss2-fapi/api/Fapi_List.c:226:Fapi_List_Finish() Profile of path not provisioned: /HS/SRK ERROR:fapi:src/tss2-fapi/api/Fapi_List.c:81:Fapi_List() ErrorCode (0x00060034) Entities_List WARNING: Listing FAPI token objects failed: "fapi:Provisioning was not executed." Please see https://github.com/tpm2-software/tpm2-pkcs11/blob/1.9.0/docs/FAPI.md for more details WARNING: Getting tokens from fapi backend failed.

(evolution:67062): CRITICAL : 08:03:20.093: failed to allocate dbus proxy object: Error calling StartServiceByName for com.intel.tss2.Tabrmd: Timeout was reached ERROR:tcti:src/tss2-tcti/tctildr-dl.c:154:tcti_from_file() Could not initialize TCTI file: libtss2-tcti-tabrmd.so.0

traxtopel commented 1 year ago

Same issue as here - https://github.com/tpm2-software/tpm2-tools/issues/3132

traxtopel commented 1 year ago

Workaround.

cat << EOF > ~/.config/pkcs11/modules/tpm2_pkcs11.module module: libtpm2_pkcs11.so disable-in: firefox thunderbird chrome msedge evolution EOF

This allows evolution and other applications to start normally.