Re: Configuring to fail when a provider doesn't load

I'm not aware of any explicitly failure capability if a provider fails to
load from the configuration file.   I think the expected process here would
be to call OPENSSL_init_crypto from your application, to drive the
configuration parsing and loading of any referenced providers, followed by
a call to OSSL_PROVIDER_available().  failure on the latter call would mean
that  the named provider in the available call wasn't loaded, despite being
referenced in your config.

Neil


On Wed, Mar 5, 2025 at 12:54 PM 'Ladd, Watson' via openssl-users <
[email protected]> wrote:

> Dear OpenSSL users,
>
>
> Is there a configuration option that will stop OpenSSL continuing to work
> if a provider fails to load? We'd like to do this to ensure that the FIPS
> module is used when possible across applications.
>
>
> Sincerely,
>
> Watson
>
> --
> You received this message because you are subscribed to the Google Groups
> "openssl-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
> To view this discussion visit
> https://groups.google.com/a/openssl.org/d/msgid/openssl-users/e26300799ded48b8a786eb060460b13f%40akamai.com
> <https://groups.google.com/a/openssl.org/d/msgid/openssl-users/e26300799ded48b8a786eb060460b13f%40akamai.com?utm_medium=email&utm_source=footer>
> .
>

-- 
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/CAJbOq14u1G6LsQWcmXDNDojhHtj2%2B77tz3F_rq3_f9NWsbBE4A%40mail.gmail.com.