<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>На свежеустановленной системе:</p>
<p># openssl smime -sign -in req.xml -out req.sig -binary -signer
req.pem -outform DER<br>
unable to load signing key file<br>
139673537910680:error:0609E09C:digital envelope
routines:PKEY_SET_TYPE:unsupported algorithm:p_lib.c:231:<br>
139673537910680:error:0606F076:digital envelope
routines:EVP_PKCS82PKEY:unsupported private key
algorithm:evp_pkey.c:84:TYPE=GOST R 34.10-2001<br>
139673537910680:error:0907B00D:PEM
routines:PEM_READ_BIO_PRIVATEKEY:ASN1 lib:pem_pkey.c:141:<br>
<br>
</p>
Установлено:<br>
<br>
# rpm -qa | grep ssl | sort<br>
alterator-sslkey-0.2.3-alt1<br>
libssl10-1.0.2h-alt1<br>
openssl-1.0.2h-alt1<br>
openssl-engines-1.0.2h-alt1<br>
<br>
Добавлял в /etc/openssl/openssl.cnf строчки:<br>
<br>
[openssl_def]<br>
engines = engine_section<br>
<br>
[engine_section]<br>
gost = gost_section<br>
<br>
[gost_section]<br>
engine_id = gost<br>
default_algorithms = ALL<br>
CRYPT_PARAMS = id-Gost28147-89-CryptoPro-A-ParamSet<br>
<br>
Не помогает.<br>
<br>
На более старой системе с ssl версии 1.0.1k всё работает.<br>
<pre class="moz-signature" cols="72">--
Мимо крокодил.
WBR, rednex CIO.
JID = <mailto:>
Skype = $local_part@<mailto:>
Viber = +7(964)103-65-67</pre>
</body>
</html>