[sisyphus] openssl & GOST

[Andrey Cherepanov]

19.05.2016 14:02, Вадим Илларионов пишет:
> На свежеустановленной системе:
> 
> # openssl smime -sign -in req.xml -out req.sig -binary -signer req.pem
> -outform DER
> unable to load signing key file
> 139673537910680:error:0609E09C:digital envelope
> routines:PKEY_SET_TYPE:unsupported algorithm:p_lib.c:231:
> 139673537910680:error:0606F076:digital envelope
> routines:EVP_PKCS82PKEY:unsupported private key
> algorithm:evp_pkey.c:84:TYPE=GOST R 34.10-2001
> 139673537910680:error:0907B00D:PEM routines:PEM_READ_BIO_PRIVATEKEY:ASN1
> lib:pem_pkey.c:141:
> 
> Установлено:
> 
> # rpm -qa | grep ssl | sort
> alterator-sslkey-0.2.3-alt1
> libssl10-1.0.2h-alt1
> openssl-1.0.2h-alt1
> openssl-engines-1.0.2h-alt1
> 
> Добавлял в /etc/openssl/openssl.cnf строчки:
> 
> [openssl_def]
> engines = engine_section
> 
> [engine_section]
> gost = gost_section
> 
> [gost_section]
> engine_id = gost
> default_algorithms = ALL
> CRYPT_PARAMS = id-Gost28147-89-CryptoPro-A-ParamSet
> 
> Не помогает.
> 
> На более старой системе с ssl версии 1.0.1k всё работает.
https://www.altlinux.org/ГОСТ_в_OpenSSL

[root на cas ~]# openssl ciphers|tr ':' '\n'|grep GOST
GOST2001-GOST89-GOST89
GOST94-GOST89-GOST89
[root на cas ~]# rpm -q libssl10
libssl10-1.0.2h-alt1
[

-- 
Andrey Cherepanov
cas на altlinux.org