[Bug 2119094] Re: Segmentation fault crash on Ubuntu 24.04 with osslsigncode

[DanielR_JG]

We're seeing an osslsigncode crash using Digicert's PKCS11
engine/provider (https://docs.digicert.com/en/digicert-keylocker/client-
tools/tool-packages/linux-clients.html), using osslsigncode to sign a
Windows PE file on Ubuntu 24.04.  The same setup works on Ubuntu 22.04.

It seems to be the same issue as https://bugs-devel.debian.org/cgi-
bin/bugreport.cgi?bug=1074764

Tested with:

libengine-pkcs11-openssl:amd64 0.4.12-1.1build2  
openssl                        3.0.13-0ubuntu3.6 


** Bug watch added: bugs-devel.debian.org/ #1074764
   https://bugs-devel.debian.org/cgi-bin/bugreport.cgi?bug=1074764

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to libp11 in Ubuntu.
https://bugs.launchpad.net/bugs/2119094

Title:
  Segmentation fault crash on Ubuntu 24.04 with osslsigncode

Status in libp11:
  Fix Released
Status in libp11 package in Ubuntu:
  Fix Released
Status in osslsigncode package in Ubuntu:
  Confirmed
Status in libp11 source package in Jammy:
  Fix Released
Status in libp11 source package in Noble:
  Triaged
Status in osslsigncode source package in Noble:
  Confirmed
Status in libp11 source package in Plucky:
  Fix Released
Status in libp11 source package in Questing:
  Fix Released

Bug description:
  osslsigncode is crashing for me when used with libengine-
  pkcs11-openssl on Ubuntu 24.04, e.g. with Google Cloud KMS PKCS#11
  provider:

  ```
  osslsigncode sign \
      -pkcs11engine /usr/lib/x86_64-linux-gnu/engines-3/pkcs11.so \
      -pkcs11module $PWD/libkmsp11-1.7-linux-amd64/libkmsp11.so \
      -certs cert.crt -key 'pkcs11:object=some-key' -h sha256 \
      -t http://timestamp.digicert.com \
      -in test.exe -out test-signed.exe
  ```

  I think this is the following issue and fix:
  * https://github.com/mtrojnar/osslsigncode/issues/388
  * https://github.com/OpenSC/libp11/pull/554

  Which should be considered for back porting or updating libp11 as this
  is a crash bug that prevents this usage of osslsigncode with no
  workaround.

To manage notifications about this bug go to:
https://bugs.launchpad.net/libp11/+bug/2119094/+subscriptions