Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 341263 - dev-libs/openssl-1.0.0a + engine pkcs11 doesn't work
Summary: dev-libs/openssl-1.0.0a + engine pkcs11 doesn't work
Status: RESOLVED UPSTREAM
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: High normal
Assignee: Gentoo's Team for Core System packages
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-10-16 11:42 UTC by loux thefuture
Modified: 2010-10-20 18:31 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description loux thefuture 2010-10-16 11:42:55 UTC
openssl >= 1.0 doesn't work with pkcs11 engine :(


Reproducible: Always

Steps to Reproduce:
1. emerge openssl
2. emerge dev-libs/engine_pkcs11
3. openssl engine -t (with openssl.cnf good)

Actual Results:  
Error configuring OpenSSL                                                       
119891364931272:error:260AC089:engine routines:INT_CTRL_HELPER:invalid cmd name:eng_ctrl.c:134:                                                                 
119891364931272:error:260AB089:engine routines:ENGINE_ctrl_cmd_string:invalid cmd name:eng_ctrl.c:316:                                                          
119891364931272:error:260BC066:engine routines:INT_ENGINE_CONFIGURE:engine configuration error:eng_cnf.c:204:section=pkcs11_section, name=oid_section, value=new_oids                                                                           
119891364931272:error:0E07606D:configuration file routines:MODULE_RUN:module initialization error:conf_mod.c:235:module=engines, value=engine_section, retcode=-1                                   

Expected Results:  
list pkcs11 as an engine

seems a trouble in the init of the engine 
see : http://www.listware.net/201004/openssl-users/57934-enginepkcs11-and-opensslcnf.html
Comment 1 SpanKY gentoo-dev 2010-10-16 21:05:20 UTC
find a patch from upstream (cvs or bug tracker) to fix the issue.  we dont have pkcs11 devices to test with, nor are we going to be patching openssl with random changes from the internet.