Created attachment 1267336 [details] Enable PKCS#11 support in the mbedtls package Currently the mbedtls package in Fedora is built without PKCS#11 smart card support. The attached patch enables that. This is crucial for OpenVPN builds against mbed TLS, where there are disappointments that PKCS#11 support is lacking. In Fedora 26 and newer, it is currently not possible to build OpenVPN against OpenSSL 1.1, so we currently use mbed TLS instead.
mbedtls-2.4.2-2.fc26 has been submitted as an update to Fedora 26. https://bodhi.fedoraproject.org/updates/FEDORA-2017-971d383980
mbedtls-2.4.2-2.fc26 has been pushed to the Fedora 26 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-971d383980
mbedtls-2.4.2-2.fc26 has been pushed to the Fedora 26 stable repository. If problems still persist, please make note of it in this bug report.