PKCS#11 signer fails with unknown error code on ARMv7 (with YubiHSM2 Nano)

[ximon18]

Krill version tested:

$ rustc -V
rustc 1.57.0 (f1edd0429 2021-11-29)

$ git describe --all --long
heads/hsm-0-g223a5266

$ lsb_release -d
Description:    Ubuntu 21.10

$ uname -a
Linux ximon-laptop 5.15.0-051500-generic #202110312130 SMP Sun Oct 31 21:33:20 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux

Prerequisites:

$ cargo install cross
$ rustup target add armv7-unknown-linux-gnueabihf

Build:

$ cross build --target armv7-unknown-linux-gnueabihf --no-default-features --features static-openssl,hsm
    Finished dev [unoptimized + debuginfo] target(s) in 2m 25s

Test:

$ scp target/debug/krill [email protected]:
$ ssh [email protected]
$ grep -Ev '^#' krill.conf | sed '/^\s*$/d'
log_level = "trace"
log_type = "stderr"
admin_token = "********"
service_uri = "https://localhost:3000/"
[[signers]]
type = "PKCS#11"
name = "YubiHSM2 Nano via PKCS#11"
lib_path = "/home/pi/yubihsm/yubihsm-shell-2.3.0b/build/pkcs11/yubihsm_pkcs11.so"
slot = 0
user_pin = "********"
$ ./krill -c ./krill.conf
...
2022-01-04 12:12:53 [ERROR] [krill::commons::crypto::signing::signers::pkcs11::signer] [YubiHSM2 Nano via PKCS#11]
Unable to initialize PKCS#11 info for library '/home/pi/yubihsm/yubihsm-shell-2.3.0b/build/pkcs11/yubihsm_pkcs11.so':
PKCS#11 Error: Failed to load PKCS#11 library '"/home/pi/yubihsm/yubihsm-shell-2.3.0b/build/pkcs11/yubihsm_pkcs11.so"':
PKCS#11: unknown (0xb6ab784000000000)

This issue was explored further using the simpler keyls project and found to be seemingly due to a problem with the pkcs11 v0.5.0 Rust crate raising an error when invoking the C_GetFunctionList() PKCS#11 function during its Ctx::new() code. Using the cryptoki Rust crate instead didn't have the same issue. See ximon18/keyls#4.

[ximon18]

Closing as this is fixed in the dev branch and we even tweeted showing it working on ARM platforms:

• https://twitter.com/NLnetLabs/status/1480899851118387203
• https://twitter.com/alexander_band/status/1480576319809282048