Closed Darsh-Dev closed 4 years ago
@mtrojnar
I have checked the similar thread https://github.com/OpenSC/libp11/issues/104. No solution found.
We are following the steps on Linux-Yocto build.
Looks like OpenSSL error: Google for: OID 1.2.3.4.1 this leads to: https://github.com/openssl/openssl/issues/4598 with some suggestions about if openssc.cnf has multiple entries.
@dengert We have check same thread , I am not getting the solution yet.
Error:
Specified object not found PKCS11_get_private_key returned NULL cannot load Private Key from engine 3070050320:error:80067065:pkcs11 engine:ctx_load_privkey:object not found:eng_back.c:862: 3070050320:error:26096080:engine routines:ENGINE_load_private_key:failed loading private key:../openssl-1.1.1b/crypto/engine/eng_pkey.c:78: unable to load Private Key
Below commands working fine, just to validate the openssl, openssl req -new -key verificationCert.key -out verificationCert.csr
Your first post had:
problem creating object tsa_policy1=1.2.3.4.1
3069923344:error:08064066:object identifier routines:OBJ_create:oid exists:../openssl-1.1.1b/crypto/objects/obj_dat.c:698:
Did you fix it?
https://aws.amazon.com/blogs/iot/using-a-trusted-platform-module-for-endpoint-device-security-in-aws-iot-greengrass/ is very complicated. Are you building this on a Raspberry Pi?
I think the problem is the wrong PKCS11 module is being used.
git clone https://github.com/tpm2-software/tpm2-pkcs11
This looks like it builds its own PKCS11 module. But Your openssl.cnf has MODULE_PATH:/usr/lib/opensc-pkcs11.so
which is trying to use the OpenSC PKCS11 module.
If you change MODULE_PATH: to point to the tmp2-pkcs11 module (not sure what is is called) it might work. libp11 can load other PKCS11 modules. It does not have to be the OpenSC module.
@dengert Thanks for the update.
After changing the MODULE_PATH:/usr/lib/opensc-pkcs11.so to MODULE_PATH:/usr/lib/pkcs11/libtpm2_pkcs11.so.
Its working fine.
Hi,
I am following the steps as mentioned https://aws.amazon.com/blogs/iot/using-a-trusted-platform-module-for-endpoint-device-security-in-aws-iot-greengrass/
I am facing issue while Generate a certificate signing request the below command is used,
Can you pl guide us further here?