Disable OpenSSL hashing when using native PKCS#11

When building with "--enable-native-pkcs11 --with-openssl", OpenSSL
support is automatically disabled in favor of native PKCS#11:

    checking for OpenSSL library... use of native PKCS11 instead

However, adding "--enable-openssl-hash" to the above two switches causes
the build to fail:

    checking for OpenSSL library... use of native PKCS11 instead
    disabled because of native PKCS11
    checking for using OpenSSL for hash functions... configure: error: No OpenSSL for hash functions

In other words, "--with-openssl" and "--enable-openssl-hash" are not
behaving consistently when used together with "--enable-native-pkcs11".

Fix by automatically disabling OpenSSL hashing support when native
PKCS#11 support is enabled.

diff --git a/configure b/configure
index 50b0fb27702219c89c7c9bf4ef589f3c6d1e213b..87a30f10938342757295988554a2616ec91f82ff 100755 (executable)
--- a/configure
+++ b/configure
@@ -17101,6 +17101,7 @@ openssldirs="/usr /usr/local /usr/local/ssl /opt/local /usr/pkg /usr/sfw"
 if test "yes" = "$want_native_pkcs11"
 then
        use_openssl="native_pkcs11"
+       want_openssl_hash="no"
        { $as_echo "$as_me:${as_lineno-$LINENO}: result: use of native PKCS11 instead" >&5
 $as_echo "use of native PKCS11 instead" >&6; }
 fi

diff --git a/configure.ac b/configure.ac
index 30bd71b957f2c4673171ffe1a063acfc0e11c0df..b743f3e205a21e56b43177de7ff03bfa8a9b1547 100644 (file)
--- a/configure.ac
+++ b/configure.ac
@@ -1557,6 +1557,7 @@ openssldirs="/usr /usr/local /usr/local/ssl /opt/local /usr/pkg /usr/sfw"
 if test "yes" = "$want_native_pkcs11"
 then
        use_openssl="native_pkcs11"
+       want_openssl_hash="no"
        AC_MSG_RESULT(use of native PKCS11 instead)
 fi