The Nvidia proprietary driver includes two PKCS#11 libraries:
libnvidia-pkcs11.so.* depends on OpenSSL 1.1 (specifically libcrypto.so.1.1)
libnvidia-pkcs11-openssl3.so.* depends on OpenSSL 3 (libcrypto.so.3)
When using Nvidia proprietary drivers on an OS or a Flatpak runtime that does not have OpenSSL 1.1, libnvidia-pkcs11.so.* cannot be loaded and is useless. Current Flatpak runtimes do not have OpenSSL 1.1 available, only OpenSSL 3.
OSs that ship only OpenSSL 3 and have dropped OpenSSL 1.1 often do not package the useless libnvidia-pkcs11.so.* in their Nvidia proprietary driver: for example, Debian testing/unstable has a libnvidia-pkcs11-openssl3 package, but no libnvidia-pkcs11. I think the Flatpak-packaged Nvidia driver should consider doing the same.
Inclusion of the unusable library leads to warning messages when using Steam's pressure-vessel container tool, which cannot easily know that a library is expected to be present-but-unusable:
x86_64-linux-gnu-capsule-capture-libs: warning: Dependencies of libnvidia-pkcs11.so.550.78 not found, ignoring: Missing dependencies: Could not find "libcrypto.so.1.1" in LD_LIBRARY_PATH [...], ld.so.cache, DT_RUNPATH or fallback /lib:/usr/lib
which causes users to be misled when trying to diagnose genuine issues, and waste their time on reporting the warning as a bug.
The Nvidia proprietary driver includes two PKCS#11 libraries:
libnvidia-pkcs11.so.*depends on OpenSSL 1.1 (specificallylibcrypto.so.1.1)libnvidia-pkcs11-openssl3.so.*depends on OpenSSL 3 (libcrypto.so.3)When using Nvidia proprietary drivers on an OS or a Flatpak runtime that does not have OpenSSL 1.1,
libnvidia-pkcs11.so.*cannot be loaded and is useless. Current Flatpak runtimes do not have OpenSSL 1.1 available, only OpenSSL 3.OSs that ship only OpenSSL 3 and have dropped OpenSSL 1.1 often do not package the useless
libnvidia-pkcs11.so.*in their Nvidia proprietary driver: for example, Debian testing/unstable has alibnvidia-pkcs11-openssl3package, but nolibnvidia-pkcs11. I think the Flatpak-packaged Nvidia driver should consider doing the same.Inclusion of the unusable library leads to warning messages when using Steam's pressure-vessel container tool, which cannot easily know that a library is expected to be present-but-unusable:
x86_64-linux-gnu-capsule-capture-libs: warning: Dependencies of libnvidia-pkcs11.so.550.78 not found, ignoring: Missing dependencies: Could not find "libcrypto.so.1.1" in LD_LIBRARY_PATH [...], ld.so.cache, DT_RUNPATH or fallback /lib:/usr/libwhich causes users to be misled when trying to diagnose genuine issues, and waste their time on reporting the warning as a bug.