Try using engine "dynamic" instead of "pkcs11" or you might need to use
everything in one go...not sure anymore how this dynamic stuff
works...Something like:
engine dynamic -pre
SO_PATH:/opt/ITsmartcard/lib/engines/engine_pkcs11.so -pre ID:pkcs11
-pre LIST_ADD:1 -pre LOAD -pre MODULE_PATH:/home/sk211688/lib/opensc-
pkcs11.so req -engine pkcs11 -new -key id_45 -keyform engine -out
req.pem -text -x509
:S
Siddhartha Kasivajhula wrote:
I installed openssl (latest) and opensc (latest) in non-default
locations and tried again, with limited success.
It now gets past the engine dynamic... stage:
-----
$ openssl
OpenSSL> engine dynamic -pre
SO_PATH:/opt/ITsmartcard/lib/engines/engine_pkcs11.so -pre ID:pkcs11
-pre LIST_ADD:1 -pre LOAD -pre MODULE_PATH:/home/sk211688/lib/opensc-
pkcs11.so
(dynamic) Dynamic engine loading support
[Success]: SO_PATH:/opt/ITsmartcard/lib/engines/engine_pkcs11.so
[Success]: ID:pkcs11
[Success]: LIST_ADD:1
[Success]: LOAD
[Success]: MODULE_PATH:/home/sk211688/lib/opensc- pkcs11.so
Loaded: (pkcs11) pkcs11 engine
OpenSSL>
-----
But it fails at the next step:
-----
OpenSSL> req -engine pkcs11 -new -key id_45 -keyform engine -out
req.pem -text -x509
unable to load module /home/sk211688/lib/opensc- pkcs11.so
can't use that engine
18952:error:80001401:Vendor defined:PKCS11_CTX_load:Unable to load
PKCS#11 module:p11_load.c:57:
18952:error:260B806D:engine routines:ENGINE_TABLE_REGISTER:init
failed:eng_table.c:161:
no engine specified
unable to load Private Key
error in req
OpenSSL>
-----
>On 8/7/07, *Douglas E. Engert* < [EMAIL PROTECTED]
<mailto:[EMAIL PROTECTED]>> wrote:
>What version of Solaris? Solaris 10 has openssl in /usr/sfw/bin and
the libs
>in /usr/sfw/lib.
Yes, right. That's the version I was using before.
>Although on my system it is OpenSSL 0.9.7d 17 Mar 2004 (+ security
patches to 2006-09-29)
Mine is 0.9.8 because I installed SunStudio 12 (from Sun's website.
it's the latest version).
You may want to set the LD_LIBRARY_PATH to point to your lib
directory with
your versions of the libcrypto.so and libssl.so
I'm pretty sure I'd done this earlier as well, but I've set it to
point there now.
------------------------------------------------------------------------
_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel
--
Regards
Signer: Eddy Nigg, StartCom Ltd.
Jabber: [EMAIL PROTECTED]
Phone: +1.213.341.0390
_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel
