<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p><font face="monospace">Can you point to instructions on how to
load provider<br>
it into OpenSSL?<br>
<br>
Is there something similar to "[engine_section]",<br>
that can be used to configure loading from openssl.conf?<br>
<br>
BR,<br>
Kris<br>
</font><font face="monospace">
</font></p>
<p><font face="monospace">
</font></p>
<div class="moz-cite-prefix">On 9/15/21 4:39 PM, Matt Caswell wrote:<br>
</div>
<blockquote type="cite"
cite="mid:787fe423-afca-feca-5a55-db2b6569f6b4@openssl.org">
<pre class="moz-quote-pre" wrap="">Another, slightly more complicated, but fully self contained provider is
here:
<a class="moz-txt-link-freetext" href="https://github.com/openssl/openssl/blob/master/test/tls-provider.c">https://github.com/openssl/openssl/blob/master/test/tls-provider.c</a>
And another one here:
<a class="moz-txt-link-freetext" href="https://github.com/openssl/openssl/blob/master/test/p_test.c">https://github.com/openssl/openssl/blob/master/test/p_test.c</a>
A minimal bare bones provider is here:
<a class="moz-txt-link-freetext" href="https://github.com/openssl/openssl/blob/master/providers/nullprov.c">https://github.com/openssl/openssl/blob/master/providers/nullprov.c</a>
The legacy provider is also worth looking at:
<a class="moz-txt-link-freetext" href="https://github.com/openssl/openssl/blob/master/providers/legacyprov.c">https://github.com/openssl/openssl/blob/master/providers/legacyprov.c</a>
Matt
On 15/09/2021 13:26, Petr Gotthard wrote:
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">Shiva,
you may also have a look at the <a class="moz-txt-link-freetext" href="https://github.com/provider-corner/vigenere">https://github.com/provider-corner/vigenere</a>
That's (as far as I know) the most simple provider implementation available.
Petr
-----Original Message-----
From: openssl-users <a class="moz-txt-link-rfc2396E" href="mailto:openssl-users-bounces@openssl.org"><openssl-users-bounces@openssl.org></a> On Behalf Of Tomas Mraz
Sent: Wednesday, September 15, 2021 2:18 PM
To: Shivakumar Poojari <a class="moz-txt-link-rfc2396E" href="mailto:Shivakumar.Poojari@rbbn.com"><Shivakumar.Poojari@rbbn.com></a>; <a class="moz-txt-link-abbreviated" href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a>
Cc: Paramashivaiah, Sunil <a class="moz-txt-link-rfc2396E" href="mailto:Sunil.Paramashivaiah@rbbn.com"><Sunil.Paramashivaiah@rbbn.com></a>; Bhattacharjee, Debapriyo (c) <a class="moz-txt-link-rfc2396E" href="mailto:dbhattacharjee@rbbn.com"><dbhattacharjee@rbbn.com></a>
Subject: Re: [EXTERNAL] Re: ENGINE API replacement for Openssl3.0
I am sorry but as I said providers are not a direct replacement for ENGINEs. It is a completely different implementation of the same concept of pluggable cryptographical modules for OpenSSL. You can look at the OpenSSL manual pages for the providers.
This is the starting point:
<a class="moz-txt-link-freetext" href="https://www.openssl.org/docs/man3.0/man7/provider.html">https://www.openssl.org/docs/man3.0/man7/provider.html</a>
There is no tutorial as for how to implement your own provider. And as I said on the application side if the application loads an OpenSSL configuration file the providers loaded can be configured via the config file and does not require any explicit API calls from the application.
I'd recommend looking at some of the test sources in the tests directory for some code examples.
Tomas
On Wed, 2021-09-15 at 10:34 +0000, Shivakumar Poojari wrote:
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">Hi Tomas,
As Engine function are deprecated I tried using providers
But how to use providers to get engine functionality tried in man
pages
Some sample program will help, maybe some sample program will give the
clear idea how to use provider
Struggling in understand the providers
Please share the sample program and the links to understand the
providers
Thanks,
shiva kumar
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
</pre>
</blockquote>
</body>
</html>