[pkg-opensc-maint] Bug#923208: libengine-pkcs11-openssl: libengines-pkcs11-openssl is installing to the wrong engine directory on x86

James.Bottomley at HansenPartnership.com James.Bottomley at HansenPartnership.com
Mon Feb 25 02:50:24 GMT 2019

Package: libengine-pkcs11-openssl
Version: 0.4.9-3
Severity: grave
Justification: renders package unusable

The problem is this:

bedivere:~# dpkg -L libengine-pkcs11-openssl |grep engines

But if you look at where the openssl engines dir actually is

bedivere:~# dpkg -L libssl1.1 |grep engines

The result being the pkcs11 engine is unusable leading to errors like this:

[  221s] invalid engine "pkcs11"
[  221s] 4145891072:error:25066067:DSO support routines:dlfcn_load:could not load the shared library:../crypto/dso/dso_dlfcn.c:117:filename(/usr/lib/i386-linux-gnu/engines-1.1/pkcs11.so): /usr/lib/i386-linux-gnu/engines-1.1/pkcs11.so: cannot open shared object file: No such file or directory

This looks to be caused by an incorrect override to the --enginesdir
configure flag in the debian/rules file of libp11:


        dh $@

        dh_auto_configure -- \


I think the libcrypto pkgconf file just works, so there's no need for the

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 4.19.0-2-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libengine-pkcs11-openssl depends on:
ii  libc6      2.28-6
ii  libssl1.1  1.1.1a-1
ii  p11-kit    0.23.14-2

libengine-pkcs11-openssl recommends no packages.

libengine-pkcs11-openssl suggests no packages.

-- no debconf information

More information about the pkg-opensc-maint mailing list