first step of v2 final release

apps/openssl.cnf

@@ -2,6 +2,7 @@
 # OpenSSL example configuration file.
 # This is mostly being used for generation of certificate requests.
 #
+openssl_conf = openssl_init
 
 # This definition stops the following lines choking if HOME isn't
 # defined.
@@ -186,6 +187,8 @@ basicConstraints=CA:FALSE
 
 # This is typical in keyUsage for a client certificate.
 # keyUsage = nonRepudiation, digitalSignature, keyEncipherment
+# keyUsage = digitalSignature
+keyUsage = keyEncipherment
 
 # This will be displayed in Netscape's comment listbox.
 nsComment			= "OpenSSL Generated Certificate"
@@ -344,3 +347,42 @@ tsa_name		= yes	# Must the TSA name be included in the reply?
 				# (optional, default: no)
 ess_cert_id_chain	= no	# Must the ESS cert id chain be included?
 				# (optional, default: no)
+
+
+[openssl_init]
+engines = engine_section
+
+[engine_section]
+skf = skf_section
+
+[pkcs11_section]
+engine_id = pkcs11
+dynamic_path = /usr/lib/engines/engine_pkcs11.so
+MODULE_PATH = /usr/local/lib/opensc-pkcs11.so
+PIN = 123456
+init = 0
+
+[sdf_section]
+engine_id = sdf
+SO_PATH = /Users/guanzhi/code/github/GmSSL-Private/engines/sdf_dummy.dylib
+VENDOR = sansec
+OPEN_DEV =
+init = 1
+
+[skf_section]
+engine_id = skf
+VERBOSE = 2
+SO_PATH = /home/guanzhi/code/github/GmSSL-Private/engines/libSKF_final.so
+SET_AUTHKEY = 31323334353637383132333435363738
+OPEN_DEV = /media/guanzhi/Factory
+OPEN_APP = myApp1
+init = 1
+
+
+
+
+#[req]
+#distinguished_name = req_distinguished_name
+#
+#[req_distinguished_name]
+