[Solved]: OpenSSL library has no GOST support

Updated on September 29, 2021

I’m trying to install SoftHSM on CentOS 7. SoftHSM depends on a cryptographic library such as Botan (min required version 1.10.0) or OpenSSL (min required version 1.0.0). I have  OpenSSL version 1.1.1 and during configuration encountered no GOST support. Below is the error message:

checking for OpenSSL GOST support... Cannot find GOST engine
configure: error: OpenSSL library has no GOST support

Solution:

From OpenSSL 1.1.0 and later GOST engine is no longer included. Below is the expert from the changelog:

The GOST engine was out of date and therefore it has been removed. 
An up-to-date GOST engine is now being maintained in an external repository. 
See: https://wiki.openssl.org/index.php/Binaries. 
Libssl still retains support for GOST ciphersuites 
(these are only activated if a GOST engine is present).

So, you need to disable the GOST engine support in SoftHSM also as below:

./configure --disable-gost

Here’s a step-by-step guide to Install and access SoftHSM via Java Program.

Was this article helpful?

Related Articles

Leave a Comment