On 19/02/2011 10:52, Martin Paljak wrote: > XCA worked with OpenSC quite OK IIRC, you might want to try it as well. Done. All I get from XCA, when loading /usr/lib/opensc-pkcs11.so is: -8<-- The following error occured: Successfully loaded PKCS#11 library: /usr/lib/opensc-pkcs11.so SUCCESS: 'SO_PATH' : '/usr/lib/engines/engine_pkcs11.so' SUCCESS: 'ID' : 'pkcs11' SUCCESS: 'LIST_ADD' : '1' FAILED: 'LOAD' : ''
error:25066067:DSO support routines:DLFCN_LOAD:could not load the shared library error:25070067:DSO support routines:DSO_load:could not load the shared library error:260B6084:engine routines:DYNAMIC_LOAD:dso not found -8<-- That's the same I get when using openssl directly (quite "obvious", since it seems XCA didn't reinvent the wheel and uses openssl as a backend). I used a text file and redirection to avoid errors when submitting commands, but it seems I still miss something. > Unfortunately engine_pkcs11 (and OpenSSL in general) is not the best > interface for smart cards, especially for user interaction purposes. > But a patch against engine_pkcs11 might make the prompt a bit easier > to understand [1] Well, I'm not scared of "complex" interfaces, if they're well documented. Too bad openssl docs about engine module are missing (or at least I can't find 'em). I could "more or less" understand what-does-what, but it's always something that could easily be wrong. BYtE! _______________________________________________ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel
