#1079925 Enabling pkcs11 engine makes openssl req operations fail

Package:
opensc-pkcs11
Source:
opensc-pkcs11
Description:
Smart card utilities with support for PKCS#15 compatible cards
Submitter:
Paweł Bogusławski
Date:
2024-08-29 09:42:02 UTC
Severity:
normal
#1079925#5
Date:
2024-08-28 15:41:14 UTC
From:
To:
In Debian 12 when /etc/ssl/openssl.cnf contains PKCS#11 config like
described on

https://github.com/OpenSC/libp11#using-the-engine-from-the-command-line

generating CSR throws an error

root@myhost:~/tmp# openssl req -new -sha256 -subj '/CN=test@example.com'
-key ./key.pem -out ./csr.pem
4097CD77667F0000:error:03000093:digital envelope
routines:default_check:command not
supported:../crypto/evp/ctrl_params_translate.c:329:

No such error if engines=engine_section line is commented out in
/etc/ssl/openssl.cnf

Look similar to

https://github.com/OpenSC/libp11/issues/456
#1079925#10
Date:
2024-08-29 09:22:53 UTC
From:
To:
This issue was replaced by

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1079985

and may be closed.