I’m trying to install SoftHSM on CentOS 7. SoftHSM depends on a cryptographic library such as Botan (min required version 1.10.0) or OpenSSL (min required version 1.0.0). I have OpenSSL version 1.1.1 and during configuration encountered no GOST support
. Below is the error message:
checking for OpenSSL GOST support... Cannot find GOST engine configure: error: OpenSSL library has no GOST support
Solution:
From OpenSSL 1.1.0 and later GOST engine is no longer included. Below is the expert from the changelog:
The GOST engine was out of date and therefore it has been removed. An up-to-date GOST engine is now being maintained in an external repository. See: https://wiki.openssl.org/index.php/Binaries. Libssl still retains support for GOST ciphersuites (these are only activated if a GOST engine is present).
So, you need to disable the GOST engine support in SoftHSM also as below:
./configure --disable-gost
Here’s a step-by-step guide to Install and access SoftHSM via Java Program.