Utimaco Bind 9, Руководство по интеграции

Страница: 10 / 20

Integration Guide: Bind 9
If you are on a 64 bit machine configure OpenSSL via
# ./Configure linux-x86_64 \
--pk11-libname=/usr/lib/cryptoserver/libcs2_pkcsll.so \
--pk11-flavor=crypto-accelerator \
--prefix=/opt/openssl-p11
The given pk11-libname parameter points to the path of the PKCS#11 library, pk11-flavor de-
termines which kind of PKCS#11 engine (provided by the patch) is used - sign-only or crypto-
accelerator and the prefix parameter points to the directory where the libraries are located after
the installation.
3. Build and test OpenSSL
# make
# make test
If some errors occur at this point, recheck the configuration.
4. Check the availability of the engine by running the command
# ./apps/openssl engine pkcs11 -t
5. Install OpenSSL binary
# make install
To make the modified OpenSSL suite available in
/opt/openssl-p11
as specified during the
configuration.
4.3.2 Microsoft Windows
1. Apply the patch located at ”bind-9.7.2-P3\bin\pkcs11\openssl-0.9.8l-patch” to OpenSSL. There-
fore a Linux environment like Cygwin is required to have the ”patch” utility available. Switch to
the OpenSSL directory and execute command:
# patch -p1 < path-to/openssl-0.9.8l-patch
2. Configuring and building OpenSSL requires Perl installed. This guide uses ActivePerl-5.12.2
4
4
ActivePerl-5.12.2 - http://www.activestate.com/activeperl/downloads
Page 10