I want to let RPi4(bookworm64) connect to AWS IoT. I followed the documentation, but I cannot go well.
I have two questions:
- I tried this command to create CSR, but an “invalid engine” error occurs.
$ openssl req -key nonzymkey.key -new -out zymkey.csr -engine zymkey_ssl -keyform e -subj "/C=US/ST=California/L=Santa Barbara/O=Zymbit/OU=Zymkey/CN=rpi.edge.zymbit.com"
Invalid engine "zymkey_ssl"
4040DE827F000000:error:12800067:DSO support routines:dlfcn_load:could not load the shared library:../crypto/dso/dso_dlfcn.c:118:filename(/usr/lib/aarch64-linux-gnu/engines-3/zymkey_ssl.so): /usr/lib/aarch64-linux-gnu/engines-3/zymkey_ssl.so: cannot open shared object file: No such file or directory
4040DE827F000000:error:12800067:DSO support routines:DSO_load:could not load the shared library:../crypto/dso/dso_lib.c:152:
4040DE827F000000:error:13000084:engine routines:dynamic_load:dso not found:../crypto/engine/eng_dyn.c:442:
4040DE827F000000:error:13000074:engine routines:ENGINE_by_id:no such engine:../crypto/engine/eng_list.c:433:id=zymkey_ssl
4040DE827F000000:error:12800067:DSO support routines:dlfcn_load:could not load the shared library:../crypto/dso/dso_dlfcn.c:118:filename(libzymkey_ssl.so): libzymkey_ssl.so: cannot open shared object file: No such file or directory
4040DE827F000000:error:12800067:DSO support routines:DSO_load:could not load the shared library:../crypto/dso/dso_lib.c:152:
4040DE827F000000:error:13000084:engine routines:dynamic_load:dso not found:../crypto/engine/eng_dyn.c:442:
No engine specified for loading private key
No filename or uri specified for loading
private key
- Using bookworm64, can I solve cURL problem which is said on AWS IoT - TLS Client Certificate Authentication | (zymbit.com)?
The following procedure was done with Raspberry PI OS Buster 32bit. The current version of cURL included in bullseye (7.74.0) seems to have an issue using the openssl engine import feature.