Custom PKCS#11 library path

[abra-mixabra]

Hello!

How do I provide a custom library path for FreeRDP?
I'm trying to use a Gemalto Safenet eToken for authentication with no luck.

xfreerdp /smartcard-list produces no output.

Using it with WLOG_LEVEL=DEBUG gives me:

[17:54:00:208] [2189952:2189952] [DEBUG][com.freerdp.utils] - Registering signal hook...
[17:54:00:211] [2189952:2189952] [DEBUG][com.freerdp.client.common.cmdline] - windows: -2001/1 posix: -1000/0
[17:54:00:214] [2189952:2189952] [DEBUG][com.winpr.ncryptp11] - Trying pkcs11-helper module 'opensc-pkcs11.so'
[17:54:00:556] [2189952:2189952] [DEBUG][com.winpr.ncryptp11] - module 'opensc-pkcs11.so' loaded

Using env PKCS11_LIBRARY=/usr/lib/libeToken.so WLOG_LEVEL=DEBUG xfreerdp /smartcard-list produces the same output as above, meaning xfreerdp still uses the default opensc-pkcs11.so library.

How do I point xfreerdp to a custom PKCS11 module?

[hardening]

Hum good catch, I've refactored the passing of the pkcs11 module and mapped it for kerberos (/kerberos:pkcs11-module:<path>), but it's partially incorrect as it should be passed to winPR when listing smartcards.

[abra-mixabra]

Invoking as xfreerdp /kerberos:pkcs11-module:/usr/lib/libeToken.so /smartcard-list leads to the same result.

I'm using the master version compiled from this commit.
I can provide you with exact building options if it makes any difference.

[hardening]

Yeah no surprise, the option is taken in account only for initializing kerberos. We need to fix something here, I will open an issue for that (or add it in the TODO list issue for smartcards)

[Vladimir-csp]

Is this supported now in freerdp3?
freerdp2 just supported eToken without any extra arguments, but I could not get it to work with freerdp3
sdl-freerdp3 /list:smartcard:pkcs11-module:/lib/libeToken.so outputs:

[15:36:42:250] [203299:00031a23] [INFO][com.winpr.ncryptp11] - [collect_keys]: unable to retrieve token info for slot #0(0)
[15:36:42:269] [203299:00031a23] [ERROR][com.winpr.ncryptp11] - [collect_keys]: unable to openSession for slot #0(0), session=(nil) rv=CKR_TOKEN_NOT_PRESENT
[15:36:42:270] [203299:00031a23] [WARN][com.freerdp.smartcardlogon] - [list_provider_keys]: Microsoft Base Smart Card Crypto Provider [] no certificates found
smartcard reader detected, listing 0 certificates:

[ondrejholy]

I am not sure about your syntax, but /kerberos:pkcs11-module:/lib/libeToken.so /smartcard-list should work with freerdp3.

[Vladimir-csp]

sdl-freerdp3 /kerberos:pkcs11-module:/lib/libeToken.so /list:smartcard?
Same output.

[ondrejholy]

Try to run with WLOG_LEVEL=trace envar to see what module is loaded.