Hi,

I've gathered more informations on this issue:

when systemd is enabled, the PIN is prompted by
the /bin/systemd-ask-password program:

https://github.com/OpenVPN/openvpn/blob/v2.3.4/src/openvpn/console.c#L158

this program is fork/exec'd by openvpn:

https://github.com/OpenVPN/openvpn/blob/v2.3.4/src/openvpn/misc.c#L347

Then the openvpn process is locked in a pkcs11-helper pthread_atfork()
callback.

Openvpn should not fork() while in the pkcs11-helper PIN prompt hook,
because ForkMode has been set to TRUE at library initialization.

> If ref pkcs11h_setForkMode() is true, you cannot fork while in hook.

https://github.com/OpenSC/pkcs11-helper/blob/pkcs11-helper-1.11/include/pkcs11-helper-1.0/pkcs11h-core.h#L403

-- 
Camille


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to