Package: libengine-pkcs11-openssl1.1 Version: 0.4.4-4 Severity: normal Dear Maintainer,
pkcs11.so is installed to /usr/lib/i686-linux-gnu/engines-1.1/, which is wrong for i386 architecture and openssl fails to load the engine: # openssl engine pkcs11 -t 3073050944:error:25066067:DSO support routines:dlfcn_load:could not load the shared library:../crypto/dso/dso_dlfcn.c:113:filename(/usr/lib/i386-linux-gnu/engines-1.1/pkcs11.so): /usr/lib/i386-linux-gnu/engines-1.1/pkcs11.so: cannot open shared object file: No such file or directory 3073050944:error:25070067:DSO support routines:DSO_load:could not load the shared library:../crypto/dso/dso_lib.c:161: 3073050944:error:260B6084:engine routines:dynamic_load:dso not found:../crypto/engine/eng_dyn.c:414: 3073050944:error:2606A074:engine routines:ENGINE_by_id:no such engine:../crypto/engine/eng_list.c:339:id=pkcs11 Manually symlinking the file works, though: root:/usr/lib/i386-linux-gnu/engines-1.1# LC_ALL=C ls -l total 32 -rw-r--r-- 1 root root 5384 Jun 5 12:40 capi.so -rw-r--r-- 1 root root 22056 Jun 5 12:40 padlock.so root:/usr/lib/i386-linux-gnu/engines-1.1# ln -sf /usr/lib/i686-linux-gnu/engines-1.1/pkcs11.so root:/usr/lib/i386-linux-gnu/engines-1.1# LC_ALL=C ls -l total 32 -rw-r--r-- 1 root root 5384 Jun 5 12:40 capi.so -rw-r--r-- 1 root root 22056 Jun 5 12:40 padlock.so lrwxrwxrwx 1 root root 45 Sep 29 00:28 pkcs11.so -> /usr/lib/i686-linux-gnu/engines-1.1/pkcs11.so root:/usr/lib/i386-linux-gnu/engines-1.1# openssl engine pkcs11 -t (pkcs11) pkcs11 engine [ available ] I guess his happens because DEB_HOST_GNU_TYPE is used in debian/rules instead of DEB_HOST_MULTIARCH. -- System Information: Debian Release: 9.1 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: i386 (i686) Kernel: Linux 4.9.0-3-686-pae (SMP w/2 CPU cores) Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to ru_RU.UTF-8), LANGUAGE=ru_RU.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to ru_RU.UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages libengine-pkcs11-openssl1.1 depends on: ii libc6 2.24-11+deb9u1 ii libssl1.1 1.1.0f-3 ii p11-kit 0.23.3-2 libengine-pkcs11-openssl1.1 recommends no packages. libengine-pkcs11-openssl1.1 suggests no packages. -- no debconf information