PKCS11-key-generation is a python script that is used for generating MKEK and HMAC.
The issue is seen while generating MKEK which takes the length of MKEK as one of the argument. The script generates "Invalid Attribute Value " as the response when the length of the argument is passed as integer (In this case , it is 32).
For Ex :# python pkcs11-key-generation --library-path '/usr/lib/libCryptoki2_64.so' --passphrase 'test123' --slot-id 1 mkek --length 32 --label 'an_mkek'
HSM returned response code: 0x13L CKR_ATTRIBUTE_VALUE_INVALID.
This is because the length of the argument is coming as String instead of an integer .The length argument needs to be converted into proper integer in order run the script sucessfully
WorkAround : The length argument defaults to 32 integer value .Hence when the length argument is not passed to the script , the value of the length arugment defaults to 32 and the script generates the MKEK values successfully
For Ex : # python pkcs11-key-generation --library-path '/usr/lib/libCryptoki2_64.so' --passphrase 'test123' --slot-id 1 mkek --label 'an_mkek'
Verified label !
MKEK successfully generated!
stack@stack-
No handlers could be found for logger "oslo_config.cfg"
HSM returned response code: 0xd0L CKR_TEMPLATE_
stack@stack-
No handlers could be found for logger "oslo_config.cfg"
MKEK successfully generated!
stack@stack-