I'd be happy to help test this. I'm very new to building C/C++ on Linux, so please bear with me. I've installed the scratch builds of libp11 for EL6 you posted David, both the release and devel packages. I've also installed the p11-kit-devel package, and verified I have p11-kit installed. Right now I'm stuck on the configure step of building OpenConnect. Now, I'm building src rpm from the link you posted Nikos with the EL6 release of OpenConnect, if that makes a difference. I'm getting warnings that my version of GnuTLS is too old, and that my version of OpenSSL is known to be broken with Cisco DTLS. I'm running RHEL6 configured to use a local repo on our corporate network, and there are no updates to either of these packages. Am I required to have to find updated versions of one of these packages to proceed? Thanks! On Fri, Jul 8, 2016 at 7:43 AM, David Woodhouse <dwmw2 at infradead.org> wrote: > On Fri, 2016-07-08 at 13:38 +0200, Nikos Mavrogiannopoulos wrote: >> >> I have never tested. Are you sure that engine_pkcs11 and libp11 are >> sufficient in el6? Oliver could you test that? > > We don't use engine_pkcs11; we use libp11 directly (and that means we > have our own copy of the PKCS#11 URI handling too). > > As noted, libp11 is completely absent from EL6 so would need to be > packaged ? but just rebuilding the latest Fedora package appears to be > fine. > > Note that OpenSC in EL6 doesn't ship with a p11-kit module file, so > isn't loaded by default. That probably wants to get fixed too. > > -- > dwmw2
