Re: [Evolution] PKCS11 in evolution

[Kåre Fiedler Christiansen <fedora kaarefc dk>]

On Sun, 2010-10-31 at 15:29 -0400, David Woodhouse wrote:
> On Sat, 2010-10-30 at 16:11 +0200, KÃre Fiedler Christiansen wrote:
> > Guides I've found instruct me to run this command:
> > modutil -add "NemID" \
> >         -libfile /path/to/libNemID_PKCS11.so.1.0.0 \
> >         -dbdir ~/.evolution
> > With 2.32.0 I assume I should instead run
> > modutil -add "NemID" \
> >         -libfile /path/to/libNemID_PKCS11.so.1.0.0 \
> >         -dbdir ~/.locale/share/evolution
> > (although I have also found references that indicate that evolution
> > has
> > possibly started using ~/.pki/nssdb so I installed the module there
> > too).
>
> The latter (~/.pki/nssdb) was the right one.
>
> I'd try debugging the certificate availability with nss-gui and the NSS
> command line tools first. If it's working in NSS then we'll look at
> Evolution.

Thanks for your reply.

I didn't know about nss-gui, but I found it. It seems only to have
source-releases yet, and no instructions on getting it to work (or a
license, even), but it was easy enough to get to work with a little
fiddling.

Should anyone need the instructions, I found nss-gui at
https://fedorahosted.org/nss-gui/
and compiled it with
  $ cd wrapnssgui
  $ make
(I had to install the package "boost-devel" first)

When running 
  $ ./wrapnssgui --ini ../xrnssgui/xrnssgui.ini --dbdir ~/.pki/nssdb/
I have no trouble seeing the PKCS#11 security device or my certificate
in the GUI - is there something you wanted me to test specifically?

Otherwise, do you have any further suggestions for debugging?

Best,
  KÃre