From: John O. <joh...@gm...> - 2020-01-20 20:52:16
|
Any plans for a new release of pkcs11-helper? The git master contains commit c192bb related to padding from last April which fixes configurations of openvpn with openssl 1.1.1 and a smartcard. It used to work with openssl 1.0, but that release is end of life as of the end of 2019. The error I got with openvpn which was fixed by using master of pkcs11-helper: ... Sun Jan 12 16:57:44 2020 OpenVPN 2.4.8 x86_64-apple-darwin18.7.0 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [MH/RECVDA] [AEAD] built on Nov 1 2019 Sun Jan 12 16:57:44 2020 library versions: OpenSSL 1.1.1d 10 Sep 2019, LZO 2.10 ... Sun Jan 12 16:57:47 2020 OpenSSL: error:141F0006:SSL routines:tls_construct_cert_verify:EVP lib Sun Jan 12 16:57:47 2020 TLS_ERROR: BIO read tls_read_plaintext error Sun Jan 12 16:57:47 2020 TLS Error: TLS object -> incoming plaintext read error Sun Jan 12 16:57:47 2020 TLS Error: TLS handshake failed Sun Jan 12 16:57:47 2020 SIGUSR1[soft,tls-error] received, process restarting |