<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal style='margin-left:.5in'>Is this a full configuration file?<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>It certainly isn’t – but I figured I’d post only the relevant part of it, rather than “crowding” the mailing list with something unnecessary.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Are there any other parts of the openssl.cnf that could be related to this issue, or help diagnose it’s cause?<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p><div><div><p class=MsoNormal style='margin-left:.5in'>пт, 19 июля 2019 г., 21:09 Blumenthal, Uri - 0553 - MITLL <<a href="mailto:uri@ll.mit.edu">uri@ll.mit.edu</a>>:<o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><p class=MsoNormal style='margin-left:.5in'>MacOS Mojave 10.14.5, OpenSSL-1.1.1c (Macports-installed).<br><br>Engines defined in the openssl.cnf file:<br><br>#############<br>[engine_section]<br>pkcs11 = pkcs11_section<br>gost = gost_section<br><br>[pkcs11_section]<br>engine_id = pkcs11<br>dynamic_path = /opt/local/lib/engines-1.1/libpkcs11.so<br>MODULE_PATH = /Library/OpenSC/lib/opensc-pkcs11.so<br>init = 0<br><br>[gost_section]<br>engine_id = gost<br>dynamic_path = /opt/local/lib/engines-1.1/gost.dylib<br>default_algorithms = ALL<br>CRYPT_PARAMS = id-Gost28147-89-CryptoPro-A-ParamSet<br>init = 1<br>#############<br><br>Note, whether the above has "init = 1" or not, does not alter the outcome.<br><br>Engine in question is "gost". <br><br>First, the engine does not load automatically/dynamically. For "openssl dgst" I have to specify it explicitly, otherwise the algorithms it provides, are not available:<br><br>$ openssl dgst -md_gost94 ~/LastTest.log<br>dgst: Unrecognized flag md_gost94<br>dgst: Use -help for summary.<br>$ openssl dgst -engine gost -md_gost94 ~/LastTest.log<br>engine "gost" set.<br>md_gost94(/Users/ur20980/LastTest.log)= e82e6e515c86851498eac606722b50b724b1f95952d4edb7202029f127751816<br>$<br><br>Second - even when I explicitly specify the engine, "openssl speed" refuses to recognize the ciphers provided by it, though "openssl enc" shows that it can access them:<br><br>$ openssl speed -engine gost -evp gost89-cbc<br>speed: gost89-cbc is an unknown cipher or digest<br>$ openssl enc -engine gost -ciphers<br>engine "gost" set.<br>Supported ciphers:<br>-aes-128-cbc -aes-128-cfb -aes-128-cfb1 <br>-aes-128-cfb8 -aes-128-ctr -aes-128-ecb <br>. . . . .<br>-des3-wrap -desx -desx-cbc <br>-gost89 -gost89-cbc -gost89-cnt <br>-gost89-cnt-12 -grasshopper-cbc -grasshopper-cfb <br>-grasshopper-ctr -grasshopper-ecb -grasshopper-ofb <br>-id-aes128-wrap -id-aes128-wrap-pad -id-aes192-wrap<br><br><br>Seems like a bug...?<br>-- <br>Regards,<br>Uri<o:p></o:p></p></blockquote></div></div></body></html>