[pkg-opensc-maint] Bug#923208: libengine-pkcs11-openssl: libengines-pkcs11-openssl is installing to the wrong engine directory on x86

[James.Bottomley at HansenPartnership.com]

Package: libengine-pkcs11-openssl
Version: 0.4.9-3
Severity: grave
Justification: renders package unusable

The problem is this:

bedivere:~# dpkg -L libengine-pkcs11-openssl |grep engines
/usr/lib/i686-linux-gnu/engines-1.1
/usr/lib/i686-linux-gnu/engines-1.1/pkcs11.la
/usr/lib/i686-linux-gnu/engines-1.1/pkcs11.so
/usr/lib/i686-linux-gnu/engines-1.1/libpkcs11.so

But if you look at where the openssl engines dir actually is

bedivere:~# dpkg -L libssl1.1 |grep engines
/usr/lib/i386-linux-gnu/engines-1.1
/usr/lib/i386-linux-gnu/engines-1.1/afalg.so
/usr/lib/i386-linux-gnu/engines-1.1/capi.so
/usr/lib/i386-linux-gnu/engines-1.1/padlock.so

The result being the pkcs11 engine is unusable leading to errors like this:

[  221s] invalid engine "pkcs11"
[  221s] 4145891072:error:25066067:DSO support routines:dlfcn_load:could not load the shared library:../crypto/dso/dso_dlfcn.c:117:filename(/usr/lib/i386-linux-gnu/engines-1.1/pkcs11.so): /usr/lib/i386-linux-gnu/engines-1.1/pkcs11.so: cannot open shared object file: No such file or directory

This looks to be caused by an incorrect override to the --enginesdir
configure flag in the debian/rules file of libp11:

---
ENGINES_DIR := /usr/lib/$(DEB_HOST_GNU_TYPE)/engines-$(OPENSSL_VERSION)

%:
        dh $@

override_dh_auto_configure:
        dh_auto_configure -- \
                --with-enginesdir=$(ENGINES_DIR)

---

I think the libcrypto pkgconf file just works, so there's no need for the
override.

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 4.19.0-2-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libengine-pkcs11-openssl depends on:
ii  libc6      2.28-6
ii  libssl1.1  1.1.1a-1
ii  p11-kit    0.23.14-2

libengine-pkcs11-openssl recommends no packages.

libengine-pkcs11-openssl suggests no packages.

-- no debconf information