Public bug reported:
Binary package hint: opensc
openssl and applications based on openssl such as wpa_supplicant can use
smart cards. to do that they load an engine, for example engine_pkcs11, and
that engine loads the smart card library, for example opensc-pkcs11.so.
that used to work very fine, and still does for command line operations.
however if configured with a config file, it is broken in the latest release
0.11.13:
a new code for the GOST encryption algorithm broke the general code,
and thus should be reverted:
in opensc-0.11.13/src/pkcs11/openssl.c there's section
106 void
107 sc_pkcs11_register_openssl_mechanisms(struct sc_pkcs11_card *card)
108 {
109 #if OPENSSL_VERSION_NUMBER >= 0x10000000L
110 /* FIXME: see openssl-1.0.0-beta3/engines/ccgost/README.gost */
111 OPENSSL_config(NULL);
112 #endif
remove this part or comment out the OPENSSL_config(NULL) and it works again.
yes, it breaks gost support in opensc, but few people use the new gost support
(a special algorithm from russia as far as I know), and many people try to use
opensc with normal rsa cards (they are broken by that change).
of course we try to find a real solution, that works for both rsa and gost card
users. but we are not sure, if the real solution wouldn't be fixing openssl
or the gost engine for openssl instead of opensc.
so for now the best thing is to handle this regression and revert the change by
removing/commenting out the "OPENSSL_config(NULL);" code.
Regards, Andreas
** Affects: opensc (Ubuntu)
Importance: Undecided
Status: New
--
latest opensc code for openssl engine broken
https://bugs.launchpad.net/bugs/565252
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
