From owner-freebsd-ports@FreeBSD.ORG Wed Sep 9 12:59:25 2009 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 46B661065692; Wed, 9 Sep 2009 12:59:25 +0000 (UTC) (envelope-from mel.flynn+fbsd.ports@mailing.thruhere.net) Received: from mailhub.rachie.is-a-geek.net (rachie.is-a-geek.net [66.230.99.27]) by mx1.freebsd.org (Postfix) with ESMTP id 9AFAF8FC15; Wed, 9 Sep 2009 12:59:24 +0000 (UTC) Received: from smoochies.rachie.is-a-geek.net (mailhub.rachie.is-a-geek.net [192.168.2.11]) by mailhub.rachie.is-a-geek.net (Postfix) with ESMTP id 907477E818; Wed, 9 Sep 2009 04:59:36 -0800 (AKDT) From: Mel Flynn To: freebsd-ports@freebsd.org Date: Wed, 9 Sep 2009 14:59:21 +0200 User-Agent: KMail/1.11.4 (FreeBSD/8.0-BETA4; KDE/4.2.4; i386; ; ) References: <200909082313.59252.mel.flynn+fbsd.ports@mailing.thruhere.net> <200909091210.35307.mel.flynn+fbsd.ports@mailing.thruhere.net> <4AA78052.30909@FreeBSD.org> In-Reply-To: <4AA78052.30909@FreeBSD.org> MIME-Version: 1.0 Content-Type: Text/Plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200909091459.22207.mel.flynn+fbsd.ports@mailing.thruhere.net> Cc: Alex Dupre Subject: Re: security/engine_pkcs11 unable to use it X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Sep 2009 12:59:25 -0000 On Wednesday 09 September 2009 12:15:46 Alex Dupre wrote: > Mel Flynn ha scritto: > > +post-install: > > + @${ECHO_MSG} "You will need a criptoki library to use the > > engine." + @${ECHO_MSG} "One is provided by security/opensc" > > + > > If you need engine_pkcs11, you know what you want, the cryptoki library > should be the start. I was actually looking for a way to decrypt my firefox's signons3.txt, which from searches on the net lead me to pkcs11 functions. ls security|grep pkcs11 lead me to the engine and nothing lead me to security/opensc. Granted, I should probably have researched the standard further. However, the configuration file issue remains. With the correct module_path added to openssl.cnf, openssl refuses to look in /usr/local/lib/engines or to give any indication it understands the sections added. Is this broken with the base openssl? -- Mel