30b0351039
This enables an engine during its package's installation, by adding it to the engines list in /etc/ssl/engines.cnf.d/engines.cnf. The engine build system was reworked, with the addition of an engine.mk file that groups some of the engine packages' definitions, and could be used by out of tree engines as well. Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
27 lines
797 B
Diff
27 lines
797 B
Diff
From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
|
|
From: Eneas U de Queiroz <cotequeiroz@gmail.com>
|
|
Date: Sat, 27 Mar 2021 17:43:25 -0300
|
|
Subject: openssl.cnf: add engine configuration
|
|
|
|
This adds configuration options for engines, loading all cnf files under
|
|
/etc/ssl/engines.cnf.d/.
|
|
|
|
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
|
|
|
|
diff --git a/apps/openssl.cnf b/apps/openssl.cnf
|
|
--- a/apps/openssl.cnf
|
|
+++ b/apps/openssl.cnf
|
|
@@ -22,6 +22,13 @@ oid_section = new_oids
|
|
# (Alternatively, use a configuration file that has only
|
|
# X.509v3 extensions in its main [= default] section.)
|
|
|
|
+openssl_conf=openssl_conf
|
|
+
|
|
+[openssl_conf]
|
|
+engines=engines
|
|
+
|
|
+.include /etc/ssl/engines.cnf.d
|
|
+
|
|
[ new_oids ]
|
|
|
|
# We can add new OIDs in here for use by 'ca', 'req' and 'ts'.
|