aboutsummaryrefslogtreecommitdiff
path: root/openssl.conf
diff options
context:
space:
mode:
authorRob Austein <sra@hactrn.net>2017-06-07 15:36:51 -0400
committerRob Austein <sra@hactrn.net>2017-06-07 15:36:51 -0400
commitb208b2cab51c0fce3d98e8e462b14d07fa3fcc66 (patch)
treeefcd482cb795a5c0accbb9b9849b7d9f5f35dc11 /openssl.conf
parentae322afdec65e7d8c180fa761c0bbb3c682ef5c0 (diff)
Add ECDSA support, via updated OpenSC pkcs11 engine.
This works on Debian Jessie (8.8) with the jessie-backports version of libengine-pkcs11-openssl: cryptech-alpha 3.0.1496536286 libengine-pkcs11-openssl 0.4.3-1~bpo8+1 opensc 0.14.0-2 openssl 1.0.1t-1+deb8u6 Version dependencies between OpenSSL and OpenSC are an even worse swamp than usual at the moment, due to API changes in OpenSSL 1.1, so it's anybody's guess whether this works on any other platform. YMMV.
Diffstat (limited to 'openssl.conf')
-rw-r--r--openssl.conf2
1 files changed, 1 insertions, 1 deletions
diff --git a/openssl.conf b/openssl.conf
index 7f156ce..887e25d 100644
--- a/openssl.conf
+++ b/openssl.conf
@@ -13,7 +13,7 @@ pkcs11 = pkcs11_section
[pkcs11_section]
engine_id = pkcs11
-dynamic_path = /usr/lib/engines/engine_pkcs11.so
+dynamic_path = ${ENV::ENGINE_MODULE}
init = 0
# For convenience while testing, we use environment variables to pass