Re: Configuring to fail when a provider doesn't load
"'Ladd, Watson' via openssl-users" <[email protected]>
| Newsgroups | gmane.comp.encryption.openssl.user |
|---|---|
| Message-ID | <[email protected]> |
Thank you very much! We might send a patch to add it sometime depending on if we end up actually needing to make it. ________________________________ From: Neil Horman <[email protected]> Sent: Wednesday, March 5, 2025 10:10:32 AM To: Ladd, Watson Cc: [email protected] Subject: Re: Configuring to fail when a provider doesn't load I'm not aware of any explicitly failure capability if a provider fails to load from the configuration file. I think the expected process here would be to call OPENSSL_init_crypto from your application, to drive the configuration parsing ZjQcmQRYFpfptBannerStart This Message Is From an External Sender This message came from outside your organization. ZjQcmQRYFpfptBannerEnd I'm not aware of any explicitly failure capability if a provider fails to load from the configuration file. I think the expected process here would be to call OPENSSL_init_crypto from your application, to drive the configuration parsing and loading of any referenced providers, followed by a call to OSSL_PROVIDER_available(). failure on the latter call would mean that the named provider in the available call wasn't loaded, despite being referenced in your config. Neil On Wed, Mar 5, 2025 at 12:54 PM 'Ladd, Watson' via openssl-users <[email protected]<mailto:[email protected]>> wrote: Dear OpenSSL users, Is there a configuration option that will stop OpenSSL continuing to work if a provider fails to load? We'd like to do this to ensure that the FIPS module is used when possible across applications. Sincerely, Watson -- You received this message because you are subscribed to the Google Groups "openssl-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+BlAfugRpC6u6w@public.gmane.org<mailto:openssl-users+unsubscribe-MCmKBN63+BlAfugRpC6u6w@public.gmane.org>. To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/e26300799ded48b8a786eb060460b13f%40akamai.com<https://urldefense.com/v3/__https://groups.google.com/a/openssl.org/d/msgid/openssl-users/e26300799ded48b8a786eb060460b13f*40akamai.com?utm_medium=email&utm_source=footer__;JQ!!GjvTz_vk!UYLCNOQpVcBvSD32FCbALBWf88CpBGdh-zKwLlFUO0A8If6pu_phrrxLI4h2jJxnUWgNvsUEYKqgSw$>. -- You received this message because you are subscribed to the Google Groups "openssl-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/08b31426316e4c58bc4431a6adfc04ee%40akamai.com.