On Mon, Feb 21, 2011 at 01:23:48PM +0100, NdK wrote: > On 19/02/2011 10:52, Martin Paljak wrote: > > > XCA worked with OpenSC quite OK IIRC, you might want to try it as well. > Done. All I get from XCA, when loading /usr/lib/opensc-pkcs11.so is: > -8<-- > The following error occured: > Successfully loaded PKCS#11 library: /usr/lib/opensc-pkcs11.so > SUCCESS: 'SO_PATH' : '/usr/lib/engines/engine_pkcs11.so' > SUCCESS: 'ID' : 'pkcs11' > SUCCESS: 'LIST_ADD' : '1' > FAILED: 'LOAD' : '' > > error:25066067:DSO support routines:DLFCN_LOAD:could not load the shared > library > error:25070067:DSO support routines:DSO_load:could not load the shared > library > error:260B6084:engine routines:DYNAMIC_LOAD:dso not found > -8<-- > > That's the same I get when using openssl directly (quite "obvious", > since it seems XCA didn't reinvent the wheel and uses openssl as a backend).
XCA 0.8.x used the engine_pkcs11. In version 0.9.0, I dropped the need of engine_pkcs11 and use the signing routines of the pkcs11 lib directly. Mainly to support multiple PKCS11 provider in parallel. So maybe XCA 0.9.0 will work for you. Cheers Christian _______________________________________________ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel