Bug ID 521336: pkcs11d initialization retry might post misleading error messages and eventually result in a pkcs11d core

Last Modified: Oct 17, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
11.6.0, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2

Fixed In:
12.1.0, 12.0.0 HF3, 11.6.1, 11.5.3 HF2

Opened: May 05, 2015

Severity: 2-Critical

Related Article: K17191

Symptoms

The retry of pkcs11d initialization might post misleading error messages and eventually result in a pkcs11d core.

Impact

After the system reboots, the /var/log/ltm shows initialize errors and the /var/log/daemon.log shows pkcs11_initialize messages: -- err pkcs11d[6247]: 01680002:3: Pkcs11 Initialize error (this is misleading; pkcs11d is actually retrying). -- err pkcs11d[6247]: Nethsm: pkcs11_initialize C_GetSlotList error 0x00000000, number of slots 0.

Conditions

When pkcs11d retries to wait for other services such as tmm or mcpd.

Workaround

Retry pkcs11d restart when tmm and mcpd are both ready.

Fix Information

The retry of pkcs11d initialization no longer posts misleading error messages when pkcs11d retries to wait for other services such as tmm or mcpd.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips