Package: libopensc-openssl
Version: 0.9.6-1
Severity: wishlist

The documentation of the package is lacking.
Could you include some usage info, like the following:

-----------------------------------------------------------
To use your smartcard with openssl, first make sure it
is working with opensc, and then use this package.
You can now use your smart card with openssl in the following way:
$openssl               
OpenSSL> engine dynamic -pre SO_PATH:/usr/lib/opensc/engine_pkcs11.so -pre 
ID:pkcs11 -pre LIST_ADD:1 -pre LOAD    
(dynamic) Dynamic engine loading support
[Success]: SO_PATH:/usr/lib/opensc/engine_pkcs11.so
[Success]: ID:pkcs11
[Success]: LIST_ADD:1
[Success]: LOAD
Loaded: (pkcs11) pkcs11 engine
OpenSSL> req -new -engine pkcs11 -keyform engine -key slot_0-id_45 -sha1 -out 
userCert.req
engine "pkcs11" set.
SmartCard PIN: 
You are about to be asked to enter information that will be incorporated
into your certificate request.
-----------------------------------------------------------------

It would be also helpful to have an example openssl.cnf
with the engine configured. I was unable to create a
working one, here is a nonworking:
############## /etc/ssl/openssl.cnf BEGIN
engines                 = engine_section
[engine_section]
dynamic = pkcs11

[pkcs11]
ID = pkcs11
SO_PATH = /usr/lib/opensc/engine_pkcs11.so
LIST_ADD = 1
LOAD = EMPTY
############### /etc/ssl/openssl.cnf END


-- System Information:
Debian Release: 3.1
  APT prefers stable
  APT policy: (990, 'stable'), (600, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.11.9-rsbacnm5
Locale: LANG=hu_HU, LC_CTYPE=hu_HU (charmap=ISO-8859-2)

Versions of packages libopensc-openssl depends on:
ii  libc6                         2.3.5-6    GNU C Library: Shared libraries an
ii  libopensc1                    0.9.6-1    SmartCard library with support for
ii  libssl0.9.7                   0.9.7g-1   SSL shared libraries

libopensc-openssl recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to