From b208b2cab51c0fce3d98e8e462b14d07fa3fcc66 Mon Sep 17 00:00:00 2001
From: Rob Austein <sra@hactrn.net>
Date: Wed, 7 Jun 2017 15:36:51 -0400
Subject: Add ECDSA support, via updated OpenSC pkcs11 engine.

This works on Debian Jessie (8.8) with the jessie-backports version of
libengine-pkcs11-openssl:

    cryptech-alpha              3.0.1496536286
    libengine-pkcs11-openssl    0.4.3-1~bpo8+1
    opensc                      0.14.0-2
    openssl                     1.0.1t-1+deb8u6

Version dependencies between OpenSSL and OpenSC are an even worse
swamp than usual at the moment, due to API changes in OpenSSL 1.1, so
it's anybody's guess whether this works on any other platform.  YMMV.
---
 openssl.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'openssl.conf')

diff --git a/openssl.conf b/openssl.conf
index 7f156ce..887e25d 100644
--- a/openssl.conf
+++ b/openssl.conf
@@ -13,7 +13,7 @@ pkcs11 = pkcs11_section
 
 [pkcs11_section]
 engine_id	= pkcs11
-dynamic_path	= /usr/lib/engines/engine_pkcs11.so
+dynamic_path	= ${ENV::ENGINE_MODULE}
 init		= 0
 
 # For convenience while testing, we use environment variables to pass
-- 
cgit v1.2.3