Hmm. Especially Your reply sentence: "this error message simply means that the slot number that OpenSSL passed to engine-pkcs11 was not recognized by the configured pkcs11 library." is interesting. Could this be some of the problem encountering in the case that I have never been able to pass the crypto-engine with the program "xmlsec1" sign --crypto openssl......... With old and new driver the error is always: func=xmlSecKeysMngrGetKey:file=keys.c:line=1370:obj=unknown:subj=xmlSecKeysMngrFindKey:error=1:xmlsec library function failed: func=xmlSecDSigCtxProcessKeyInfoNode:file=xmldsig.c:line=871:obj=unknown:subj=unknown:error=45:key is not found: I am striving hard to find the right way to plot in all info concerning slot and key_id into the openssl.cnf
SiSt wrote: > > Where is the error message invalid slot number coming from? From the > carddriver? Anything to do with Multipart/Singlepart sign. It used to work > with previous driver. > openssl> req -config /etc/ssl/openssl.cnf -x509 -engine pkcs11 -new -key > id_1 -keyform engine -out req.pem -text -subj "/CN=Name Name" > engine "pkcs11" set. > > Invalid slot number: 0 > PKCS11_get_private_key returned NULL > cannot load Private Key from engine > 3073644168:error:26096080:engine routines:ENGINE_load_private_key:failed > loading private key:eng_pkey.c:126: > unable to load Private Key > error in req > S > -- View this message in context: http://old.nabble.com/Invalid-slot-number%3A-0-tp32767887p32776442.html Sent from the OpenSSL - User mailing list archive at Nabble.com. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
