From 146823be02cd7b3bf3d80e7b8d2f672d1d451ec4 Mon Sep 17 00:00:00 2001 From: Mathieu Tortuyaux Date: Thu, 18 Jan 2024 15:43:57 +0100 Subject: [PATCH] baselayout: add openssl configuration required to sign from the SDK this configuration has to be loaded when signing release payloads from the SDK. Signed-off-by: Mathieu Tortuyaux --- baselayout/pkcs11.cnf | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 baselayout/pkcs11.cnf diff --git a/baselayout/pkcs11.cnf b/baselayout/pkcs11.cnf new file mode 100644 index 0000000..cb899a1 --- /dev/null +++ b/baselayout/pkcs11.cnf @@ -0,0 +1,13 @@ +openssl_conf = openssl_init + +[openssl_init] +engines=engine_section + +[engine_section] +pkcs11 = pkcs11_section + +[pkcs11_section] +engine_id = pkcs11 +dynamic_path = /usr/lib64/engines-3/libpkcs11.so +MODULE_PATH = /usr/lib64/pkcs11/opensc-pkcs11.so +init = 0