Re: [Buildroot] [PATCH 1/4] package/uboot-tools: do not require OpenSSL PKCS#11 provider

[Julien Olivain via buildroot <buildroot@buildroot.org>]

On 16/10/2026 17:28, Fiona Klute via buildroot wrote:
> From: "Fiona Klute (othermo GmbH)" <fiona.klute@gmx.de>
> 
> Patch 0003-Add-support-for-OpenSSL-Provider-API.patch makes
> package/uboot-tools build without the OpenSSL engine API, but it fails
> at runtime if pkcs11-provider [1] is not available. That provider is
> not packaged in Buildroot, and should not be required when not
> actually using PKCS#11 keys.
> 
> The problem has been discussed on the U-Boot mailing list [2], and
> part of the reason this patch has not been merged into U-Boot yet. It
> causes tests.package.test_uboot_tools.TestHostUbootTools to fail with:
> 
> === STDOUT/STDERR ===
> At main.c:259:
> - SSL error:12800067:DSO support routines::could not load the shared 
> library: crypto/dso/dso_dlfcn.c:115
> - SSL error:12800067:DSO support routines::could not load the shared 
> library: crypto/dso/dso_lib.c:147
> - SSL error:07880025:common libcrypto routines::reason(37): 
> crypto/provider_core.c:1026
> mkimage: OSSL_PROVIDER_try_load(pkcs11)
> 
> This commit adjust the patch as suggested in [2] to continue if the
> PKCS#11 provider fails to load, making the test work. However,
> actually using PKCS#11 keys will not work until pkcs11-provider [1] is
> packaged.
> 
> [1] https://github.com/openssl-projects/pkcs11-provider
> [2] 
> https://lists.u-boot-project.org/pipermail/u-boot/2026-August/629348.html
> 
> Fixes: f87cf2d6239d676147dec1fef088d81ee873277a ("package/uboot-tools: 
> Fix build with OpenSSL 4.0.0")
> 
> Signed-off-by: Fiona Klute (othermo GmbH) <fiona.klute@gmx.de>

Series applied to master, thanks.
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot