Hi Aleksey,
Aleksey Samsonov wrote:
> Hello,
>
> Andreas Jellinghaus wrote:
>
>> Am Freitag 16 April 2010 08:51:31 schrieb Aleksey Samsonov:
>>
>>> Hello,
>>>
>>> Jan Just Keijser wrote:
>>>
>>>> in opensc-0.11.13/src/pkcs11/openssl.c there's section
>>>>
>>>> 106 void
>>>> 107 sc_pkcs11_register_openssl_mechanisms(struct sc_pkcs11_card *card)
>>>> 108 {
>>>> 109 #if OPENSSL_VERSION_NUMBER >= 0x10000000L
>>>> 110 /* FIXME: see openssl-1.0.0-beta3/engines/ccgost/README.gost */
>>>> 111 OPENSSL_config(NULL);
>>>> 112 #endif
>>>>
>>> It needs for loading and using engine with GOST algorithms.
>>>
>> I think we cannot break an existing and often used feature, for the sake
>> of a new feature, so there has to be a different way.
>>
>
> I'm absolutely agree with you.
>
>
>
>> so its a regression and the natural way to handle this would be to revert
>> your change. but it breaks opensc for gost users. what can we do for them
>> to improve the situation, without breaking openssl/engine/opensc use?
>>
>
> I started to looking for right solution. I can test if anyone has any
> solutions.
>
I was not able to reproduce your original problem, i.e. the GOST engine
not working with openssl 1.0.0 and with the OPENSSL_config line
commented out. Can you test this combo:
- openssl 1.0.0 + GOST library
- opensc 0.11.13
- run
openssl engine -vvv -t -c
cheers,
JJK
_______________________________________________
opensc-devel mailing list
[email protected]
http://www.opensc-project.org/mailman/listinfo/opensc-devel
