Package: libengine-pkcs11-openssl
Version: 0.4.9-3
Severity: grave
Justification: renders package unusable
The problem is this:
bedivere:~# dpkg -L libengine-pkcs11-openssl |grep engines
/usr/lib/i686-linux-gnu/engines-1.1
/usr/lib/i686-linux-gnu/engines-1.1/pkcs11.la
/usr/lib/i686-linux-gnu/engines-1.1/pkcs11.so
/usr/lib/i686-linux-gnu/engines-1.1/libpkcs11.so
But if you look at where the openssl engines dir actually is
bedivere:~# dpkg -L libssl1.1 |grep engines
/usr/lib/i386-linux-gnu/engines-1.1
/usr/lib/i386-linux-gnu/engines-1.1/afalg.so
/usr/lib/i386-linux-gnu/engines-1.1/capi.so
/usr/lib/i386-linux-gnu/engines-1.1/padlock.so
The result being the pkcs11 engine is unusable leading to errors like this:
[ 221s] invalid engine "pkcs11"
[ 221s] 4145891072:error:25066067:DSO support routines:dlfcn_load:could not
load the shared
library:../crypto/dso/dso_dlfcn.c:117:filename(/usr/lib/i386-linux-gnu/engines-1.1/pkcs11.so):
/usr/lib/i386-linux-gnu/engines-1.1/pkcs11.so: cannot open shared object file:
No such file or directory
This looks to be caused by an incorrect override to the --enginesdir
configure flag in the debian/rules file of libp11:
---
ENGINES_DIR := /usr/lib/$(DEB_HOST_GNU_TYPE)/engines-$(OPENSSL_VERSION)
%:
dh $@
override_dh_auto_configure:
dh_auto_configure -- \
--with-enginesdir=$(ENGINES_DIR)
---
I think the libcrypto pkgconf file just works, so there's no need for the
override.
-- System Information:
Debian Release: buster/sid
APT prefers testing
APT policy: (500, 'testing'), (500, 'stable')
Architecture: i386 (i686)
Kernel: Linux 4.19.0-2-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages libengine-pkcs11-openssl depends on:
ii libc6 2.28-6
ii libssl1.1 1.1.1a-1
ii p11-kit 0.23.14-2
libengine-pkcs11-openssl recommends no packages.
libengine-pkcs11-openssl suggests no packages.
-- no debconf information
