blob: 078b5a6d61f7e2a52fa0a83c533206ae90cd494b (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
|
# This is not a script in its own right, it's included by the other
# scripts to let us keep all the environment variables in a single place.
# Where the PKCS #11 module lives, usually /usr/lib/libcryptech-pkcs11.so
export PKCS11_MODULE=/usr/lib/libcryptech-pkcs11.so
# PIN for user account on the HSM. In production you would NOT
# want this in an environment variable!
export PKCS11_PIN=fnord
# Where to find our OpenSSL configuration file.
export OPENSSL_CONF=`pwd`/openssl.conf
# Where to find the engine module this week (its name changes with
# architecture, OpenSSL version, and phase of the moon).
export ENGINE_MODULE=`dpkg -L libengine-pkcs11-openssl | egrep '/(engine_)?pkcs11[.]so$'`
# If USE_PKCS11SPY is set, it should be an absolute path to the OpenSC
# pkcs11-spy.so debugging tool, which we will splice between OpenSSL
# and the real PKCS #11 library. This is not something you would want
# to do in production, but can be useful when testing. See
#
# https://github.com/OpenSC/OpenSC/wiki/Using-OpenSC
#
# By default, pkcs11-spy writes to stderr, but you can override this
# by setting PKCS11SPY_OUTPUT.
if test "X$USE_PKCS11SPY" != "X" && test -r "$USE_PKCS11SPY"
then
export PKCS11SPY="$PKCS11_MODULE"
export PKCS11_MODULE="$USE_PKCS11SPY"
fi
|
