Introduce the provider property
authorMatt Caswell <matt@openssl.org>
Fri, 14 Feb 2020 22:49:26 +0000 (22:49 +0000)
committerMatt Caswell <matt@openssl.org>
Fri, 21 Feb 2020 20:17:02 +0000 (20:17 +0000)
commit745fc918e7eeb86b2ac541325a8ae5c6e374ee56
tree9c79d0d5d784ec0251bb08f51ab20a04c42e69cc
parent980a880ee5a85b94caac3049c7d3be0b765d97d3
Introduce the provider property

Replace the properties default, fips and legacy with a single property
called "provider". So, for example, instead of writing "default=yes" to
get algorithms from the default provider you would instead write
"provider=default". We also have a new "fips" property to indicate that
an algorithm is compatible with FIPS mode. This applies to all the
algorithms in the FIPS provider, as well as any non-cryptographic
algorithms (currently only serializers).

Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/11097)
15 files changed:
crypto/property/property_parse.c
doc/man7/EVP_MAC-BLAKE2.pod
doc/man7/EVP_MAC-CMAC.pod
doc/man7/EVP_MAC-GMAC.pod
doc/man7/EVP_MAC-HMAC.pod
doc/man7/EVP_MAC-KMAC.pod
doc/man7/EVP_MAC-Poly1305.pod
doc/man7/EVP_MAC-Siphash.pod
doc/man7/property.pod
doc/man7/provider.pod
providers/defltprov.c
providers/fips/fipsprov.c
providers/legacyprov.c
test/evp_fetch_prov_test.c
test/recipes/30-test_evp_fetch_prov.t