#1152864 pkcs11-daemon: the default PKCS11_LIB names libsofthsm2, which is not a dependency

Package:
pkcs11-daemon
Source:
pkcs11-daemon
Description:
proxy for the PKCS11-library (server)
Submitter:
Daniel Ramos
Date:
2026-11-02 13:59:03 UTC
Severity:
normal
Tags:
#1152864#5
Date:
2026-11-02 13:57:08 UTC
From:
To:
Dear Maintainer,

pkcs11-daemon 0.4.1-5 ships /etc/default/pkcs11-daemon with PKCS11_LIB=/usr/lib/softhsm/libsofthsm2.so.
The package depends only on libc6 and libssl3t64, so on a system without libsofthsm2 the daemon stops with "couldn't open library" and pkcs11-daemon.service ends in start-limit-hit.
Installing libsofthsm2 makes it start with the default configuration.

The fix is one line in debian/control, since the shipped default names that library:
--- a/debian/control
+++ b/debian/control
@@ -25,7 +25,7 @@

 Package: pkcs11-daemon
 Architecture: any
-Depends: ${shlibs:Depends}, ${misc:Depends}
+Depends: ${shlibs:Depends}, ${misc:Depends}, libsofthsm2
 Description: proxy for the PKCS11-library (server)
  This project is based on a stripped down GNOME Keyring without all GNOME
  dependencies and other features.

I found this with AI assistance and checked it myself on Debian forky.

Daniel Ramos