[Pkg-openssl-devel] Bug#611054: Bug#611054: /usr/bin/openssl without gost engine

[Kurt Roeckx]

On Tue, Jan 25, 2011 at 10:10:38AM +0500, Stanislav Vlasov wrote:
> Package: openssl
> Version: 1.0.0c-2
> 
> openssl binary from package does not know about any gost algorithm.
> 
> For example:
> $ openssl dgst -md_gost94 empty.txt
> unknown option '-md_gost94'

It's a engine that needs to be loaded.

If you add this near the top of the /etc/ssl/openssl.cnf file:
openssl_conf = openssl_def

And this somewhere else, for instance at the end:
==== begin
[openssl_def]
engines = engine_section

[engine_section]
gost = gost_section

[gost_section]
soft_load=1
default_algorithms = ALL
==== end

It should work.

I'm planning on adding that, and other engines, for the next version.


Kurt