[Opensc-devel] engine_pkcs11/openssl 1.0+ incompatibility

[David L. <dr...@me...>]

Hi,

We have a legacy application using engine_pkcs11 on debian sarge (with openssl 0.9.8h).
I would like to move to openssl 1.0.0.e, but we require pkcs11 support.
I have taken engine_pkcs11 and libp11 from the opensc project repositories.

When I try (e.g.):

openssl dgst -engine pkcs11 -keyform engine -binary -sha1 -sign 10:a93d76ef41f5bb08f17cff81479a664646f66362 file

which used to work, I now get the following errors:

3085010592:error:260C0065:engine routines:ENGINE_get_pkey_meth:unimplemented public key method:tb_pkmeth.c:127:
3085010592:error:0609D09C:digital envelope routines:INT_CTX_NEW:unsupported algorithm:pmeth_lib.c:164:

There appears to have been a change in the openssl engine interface, such that engine_pkcs11 needs an update - Am I right in this assumption?

regards, David Lamkin

--
David Lamkin
+44 (0) 1223 566731 (Direct), +44 (0) 1223 566727 (Fax)
Metanate Limited. Registered in England No 4046086 at:
Lincoln House, Station Court, Great Shelford, Cambridge CB22 5NE, UK
www.metanate.com (Consultancy) www.schemus.com (Data synchronisation)

This e-mail and all attachments it may contain is confidential and
intended solely for the use of the individual to whom it is addressed.
Any views or opinions presented are those of the author and do not
necessarily represent those of Metanate Ltd.  If you are not the
intended recipient, be advised that you have received this e-mail in
error and that any use, dissemination, printing, forwarding or copying
of this e-mail is strictly prohibited.  Please contact the sender if
you have received this e-mail in error.