# \[SOLVED\] Again from the beginning:

**URL:** https://support.nitrokey.com/t/solved-again-from-the-beginning/4371
**Category:** HSM
**Created:** [August 25, 2022, 10:18am UTC](https://support.nitrokey.com/t/solved-again-from-the-beginning/4371 "2022-08-25T10:18:20Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![mSTYX](https://support.nitrokey.com/user_avatar/support.nitrokey.com/mstyx/32/1184_2.png) [@mSTYX](https://support.nitrokey.com/u/mSTYX)
#### Post date: [August 25, 2022, 10:18am UTC](https://support.nitrokey.com/t/solved-again-from-the-beginning/4371/1 "2022-08-25T10:18:20Z")

</div>

I would like to build a PKI with SSO myself.

I have a (Debian Bullseye) server, I have the Nitrokey HSM

OpenSC is running, the Nitrokey HSM is recognized and I have changed the two PIN.

As I understand it, I now need a certificate authority (0) This I would like to build according to the instructions here yes.

But, “my Debian” does not have the correct “engine1.1” (So the name of the directory) in which actually the file: “pkcs11.so” should be located. But I don’t have this file. In the directory I have only the two files: “afalg.so” & “padlock.so”.

The complete error message when creating the ROOT certificate

> invalid engine “pkcs11”  
> 139786609587520:error:25066067:DSO support routines:dlfcn\_load:could not load the shared library:…/crypto/dso/dso\_dlfcn.c:118:filename(/usr/lib/x86\_64-linux-gnu/engines-1.1/pkcs11.so): /usr/lib/x86\_64-linux-gnu/engines-1.1/pkcs11.so: cannot open shared object file: No such file or directory  
> 139786609587520:error:25070067:DSO support routines:DSO\_load:could not load the shared library:…/crypto/dso/dso\_lib.c:162:  
> 139786609587520:error:260B6084:engine routines:dynamic\_load:dso not found:…/crypto/engine/eng\_dyn.c:414:  
> 139786609587520:error:2606A074:engine routines:ENGINE\_by\_id:no such engine:…/crypto/engine/eng\_list.c:421:id=pkcs11  
> 139786609587520:error:25066067:DSO support routines:dlfcn\_load:could not load the shared library:…/crypto/dso/dso\_dlfcn.c:118:filename(libpkcs11.so): libpkcs11.so: cannot open shared object file: No such file or directory  
> 139786609587520:error:25070067:DSO support routines:DSO\_load:could not load the shared library:…/crypto/dso/dso\_lib.c:162:  
> 139786609587520:error:260B6084:engine routines:dynamic\_load:dso not found:…/crypto/engine/eng\_dyn.c:414:

Furthermore, I am also missing the file: “dso\_dlfcn.c” and other files from the package “crypto”. Did I miss something? Or skipped? PKCS11 as “backports” in Debian? What would you do?

Thanks in advance

---

<div class="post-metadata">

### Author: ![saper](https://support.nitrokey.com/user_avatar/support.nitrokey.com/saper/32/493_2.png) [@saper](https://support.nitrokey.com/u/saper)
#### Post date: [August 25, 2022, 12:09pm UTC](https://support.nitrokey.com/t/solved-again-from-the-beginning/4371/2 "2022-08-25T12:09:01Z")

</div>

This is a Debian problem how they package OpenSSL and its engines…

On some old Debian box I have access to I can see “libengine-pkcs11-openssl” package installed, maybe this is the one you are looking for?

---

<div class="post-metadata">

### Author: ![mSTYX](https://support.nitrokey.com/user_avatar/support.nitrokey.com/mstyx/32/1184_2.png) [@mSTYX](https://support.nitrokey.com/u/mSTYX)
#### Post date: [August 25, 2022, 12:34pm UTC](https://support.nitrokey.com/t/solved-again-from-the-beginning/4371/3 "2022-08-25T12:34:19Z")

</div>

Facepalm …  
Yes this was the right package  
Big Thanks