diff options
| author | Rob Austein <sra@hactrn.net> | 2017-06-07 15:36:51 -0400 |
|---|---|---|
| committer | Rob Austein <sra@hactrn.net> | 2017-06-07 15:36:51 -0400 |
| commit | b208b2cab51c0fce3d98e8e462b14d07fa3fcc66 (patch) | |
| tree | efcd482cb795a5c0accbb9b9849b7d9f5f35dc11 /environment.sh | |
| parent | ae322afdec65e7d8c180fa761c0bbb3c682ef5c0 (diff) | |
Add ECDSA support, via updated OpenSC pkcs11 engine.
This works on Debian Jessie (8.8) with the jessie-backports version of
libengine-pkcs11-openssl:
cryptech-alpha 3.0.1496536286
libengine-pkcs11-openssl 0.4.3-1~bpo8+1
opensc 0.14.0-2
openssl 1.0.1t-1+deb8u6
Version dependencies between OpenSSL and OpenSC are an even worse
swamp than usual at the moment, due to API changes in OpenSSL 1.1, so
it's anybody's guess whether this works on any other platform. YMMV.
Diffstat (limited to 'environment.sh')
| -rw-r--r-- | environment.sh | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/environment.sh b/environment.sh index f3f5c75..078b5a6 100644 --- a/environment.sh +++ b/environment.sh @@ -14,6 +14,11 @@ export PKCS11_PIN=fnord export OPENSSL_CONF=`pwd`/openssl.conf +# Where to find the engine module this week (its name changes with +# architecture, OpenSSL version, and phase of the moon). + +export ENGINE_MODULE=`dpkg -L libengine-pkcs11-openssl | egrep '/(engine_)?pkcs11[.]so$'` + # If USE_PKCS11SPY is set, it should be an absolute path to the OpenSC # pkcs11-spy.so debugging tool, which we will splice between OpenSSL # and the real PKCS #11 library. This is not something you would want |