Johannes Schneider 3de9f29b7f imx-cst: restore PKCS#11 signing on OpenSSL 4 via the provider ...

0015-fix-openssl-4-engine-api-removal made CST build against OpenSSL 4 by
stubbing out the removed ENGINE API, but left PKCS#11-backed signing broken:
ENGINE_by_id("pkcs11") returns NULL, so engine_ctx_init() fails. Add a patch
that reimplements the pkcs11 certificate and key loading on OSSL_STORE and the
pkcs11 provider (pkcs11-provider), restoring HSM/token-backed signing on
OpenSSL 4. OpenSSL 3 builds are unaffected.

Assisted-by: Claude:claude-opus-4-8
Signed-off-by: Johannes Schneider <johannes.schneider@leica-geosystems.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>

2026-10-11 11:03:51 -07:00

..

imx-cst

imx-cst: restore PKCS#11 signing on OpenSSL 4 via the provider

2026-10-11 11:03:51 -07:00

imx-cst_4.0.1.bb

imx-cst: restore PKCS#11 signing on OpenSSL 4 via the provider

2026-10-11 11:03:51 -07:00