OpenSSL 0.9.8.a engine pkcs11 load error

Previous Topic Next Topic
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view

OpenSSL 0.9.8.a engine pkcs11 load error

Hello people. Please help me with following problem:
Under Windows XP professional SP2 (+all current updates)
I can not use Smart card Bundle v.0.6.
Openssl give me an error when I trying to load pkcs11 engine.
Here is my configs.
1) in working folder I has bin folder(OpenSSL files), dll folder (all relative dlls),
bin2 folder(exe files from SCB install) and SCB folder with profiles for OpenSC.
2) open from working folder new cmd.exe and run setpath.cmd:
@SET PATH=.\bin;.\bin2;.\dll;.\SCB;%PATH%
@SET OPENSSL_CONF=%CD%\openssl.cnf

3) openssl.cnf has following head :

HOME = .
openssl_conf = openssl_init
engines = engine_section
pkcs11 = pkcs11_section
engine_id = pkcs11
dynamic_path = $ENV::HOME/dll/engine_pkcs11.dll
MODULE_PATH = $ENV::HOME/dll/opensc-pkcs11.dll
init = 0

4) Now paste a command:
D:\OpenSSL-RootCA>openssl req -engine pkcs11 -new -key id_45 -keyform engine -out req.pem -text -x509 -subj "/CN=Voljka"
Error configuring OpenSSL
1504:error:260AC089:engine routines:INT_CTRL_HELPER:invalid cmd name:.\crypto\engine\eng_ctrl.c:134:
1504:error:260AB089:engine routines:ENGINE_ctrl_cmd_string:invalid cmd name:.\crypto\engine\eng_ctrl.c:316:
1504:error:0E07606D:configuration file routines:MODULE_RUN:module initialization
 error:.\crypto\conf\conf_mod.c:234:module=engines, value=engine_section, retcode=-1
As alternative a try to do (no modifications to default openssl.cnf):
OpenSSL> engine dynamic -pre SO_PATH:engine_pkcs11 -pre ID:pkcs11 -pre LIST_ADD: 1 -pre LOAD
-pre MODULE_PATH:opensc-pkcs11
(dynamic) Dynamic engine loading support
[Success]: SO_PATH:engine_pkcs11
[Success]: ID:pkcs11
[Success]: LIST_ADD:1
[Success]: LOAD
[Success]: MODULE_PATH:opensc-pkcs11
Loaded: (pkcs11) pkcs11 engine
OpenSSL> req -engine pkcs11 -new -key id_45 -keyform engine -out req.pem -text -x509

After this OpenSSL crash.

Please, advise how to fix this. Search Internet for any clues, but no results.