-
Notifications
You must be signed in to change notification settings - Fork 191
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Apps hang when pkcs11 engine is defined in openssl.cnf #294
Comments
Is this a mismatch of OpenSSL versions. Do these both used the same libcrypto?
|
UpdateI just re-built OpenSC against OpenSSL-1.1.1-stable. Same hang-up by apps ( |
Ping...? |
I was expecting you to look at the output of otool to see what needs to be fixed. It looks like you have there may be some issues between 1.0.2 and 1.1.1 which are not handled in the linker, or the libs are passing structures that do not match. |
I don't think there's anything in my config that needs fixing. The problem seems to be with the
I no longer have 1.0.2 on my machine(s). Everything is 1.1.1, and there's 3.0 in a special directory that's not in any PATH. |
But you said: "/Library/OpenSC/lib/opensc-pkcs11.so is statically linked with a different version of OpenSSL (1.0.2-stable)." |
Yes it was. It isn't any more. I've moved to the whole system to 1.1.1. |
Hello, Similar problem in updated Debian 10; if /etc/ssl/openssl.cnf contains
then trying to run "puppet agent --test" (which uses TLS for communication to puppetmaster server) throws error
and sometimes also:
or
Commenting out line
or line
in /etc/ssl/openssl.cnf resolves problem with "puppet agent --test" - no problems with connection. Versions used:
Regars, |
I'm getting the same
EDIT things improved after I migrated from using |
Can you still reproduce it with the current master? |
Problem described in #294 (comment) does not exist in Debian 11 with
|
It is weird. MacOS 10.14.6, Xcode-10.3, OpenSSL-1.1.1c (Macports-installed), current master of libp11.
Symptoms: when PKCS#11 engine is defined,
git
hangs upon HTTPS retrieval. If I comment the engine out inopenssl.cnf
, or tellgit
to not loadopenssl.cnf
- it works fine:Here's the openssl.cnf file with the middle cut off (to save space and make reading easier):
Note: commenting out "gost" engine had no effect. Commenting out "pkcs11" engine completely resolved this problem, but caused a different problem with an app that uses OpenSSL and libp11 to access smartcards.
Here's the hanging process snap, in case it can help figuring what's wrong:
The text was updated successfully, but these errors were encountered: