Re: [Opensc-devel] Adding libp11 (or its equivalent) to OpenSSL

[David W. <dw...@in...>]

On Fri, 2016-02-26 at 23:22 +0200, Michael Jackson wrote:
> You can see reports of it all over the googlespace:
> 
> https://www.google.com/#q=openssl+engine+missing+libgost.so
> 
> Engine will simply refuse to load any engine if libgost.so is not
> present on the system. Remove your libgost.so and give it a try ;-)
> Or, just spin up a RHEL 7 or variant VM and give it a try. Haven't
> tried it with Fedora.

The engine works fine in Fedora. In fact, Fedora packaging guidelines
now say that packages which use OpenSSL SHOULD be transparently
accepting PKCS#11 URIs wherever they can take filenames for
certificates. Which means more things are using the engine than before.

If it's actually broken in RHEL/CentOS, I'd expect to see a Red Hat bug
filed for that. A reference in bugzilla.redhat.com is the only relevant
one.

But as Alon says, that's not strictly relevant to this discussion.

-- 
dwmw2