> I suspect the culprit might be one of pkcs11 modules you are using, not > p11-toool itself. Yeah, you're right -- thanks! eToken's PKCS11 still uses 1.1, even in a current version.