Re: [Opensc-devel] Adding libp11 (or its equivalent) to OpenSSL

[Richard L. <le...@op...>]

In message <CAN...@ma...> on Fri, 26 Feb 2016 22:36:36 +0200, Michael Jackson <mik...@gm...> said:

mikedotjackson> Engine isn't even a first-class citizen in OpenSSL, doesn't get much
mikedotjackson> love anymore at all from the developers. Engine does not work on any
mikedotjackson> RHEL variants at the moment. Reason being is that Engine actually has
mikedotjackson> a downward dependency on one of it's plugins: Gost (Russian Federal
mikedotjackson> Crypto standard). If libgost.so is missing from a system, OpenSSL will
mikedotjackson> refuse to load Engine wholesale. And libgost.so is not included in the
mikedotjackson> RH builds of OpenSSL. Additionally, Engine has been entirely ripped
mikedotjackson> out from LibreSSL so that excludes at least OpenBSD as well, maybe
mikedotjackson> also Free and NetBSD, too.

Uhmmm...  color me surprised, 'cause what you tell me doesn't
correspond to this developer's (hello, hi) experience.  I'm not sure
what would make the ENGINE framework refuse to work without GOST, and
I'm also utterly surprised to have seen no reports at all about this.

Cheers,
Richard

-- 
Richard Levitte         le...@op...
OpenSSL Project         http://www.openssl.org/~levitte/