From b19fcc66d382357617744690dc3363947de2cb6f Mon Sep 17 00:00:00 2001 From: Tomas Mraz Date: Wed, 9 Jun 2021 17:04:12 +0200 Subject: [PATCH] Document that provider name can be a full path Reviewed-by: Matt Caswell Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/15680) --- doc/man1/openssl.pod | 7 ++++++- doc/man3/OSSL_PROVIDER.pod | 7 ++++++- 2 files changed, 12 insertions(+), 2 deletions(-) diff --git a/doc/man1/openssl.pod b/doc/man1/openssl.pod index 3b47ae97298..b6f4029a678 100644 --- a/doc/man1/openssl.pod +++ b/doc/man1/openssl.pod @@ -651,7 +651,12 @@ the PKCS#11 URI as defined in RFC 7512 should be possible to use directly: =item B<-provider> I -Load and initialize the provider identified by I. +Load and initialize the provider identified by I. The I +can be also a path to the provider module. In that case the provider name +will be the specified path and not just the provider module name. +Interpretation of relative paths is platform specific. The configured +"MODULESDIR" path, B environment variable, or the path +specified by B<-provider-path> is prepended to relative paths. See L for a more detailed description. =item B<-provider-path> I diff --git a/doc/man3/OSSL_PROVIDER.pod b/doc/man3/OSSL_PROVIDER.pod index 2b014c46717..bc4cc1641ea 100644 --- a/doc/man3/OSSL_PROVIDER.pod +++ b/doc/man3/OSSL_PROVIDER.pod @@ -81,7 +81,12 @@ OSSL_PROVIDER_load() loads and initializes a provider. This may simply initialize a provider that was previously added with OSSL_PROVIDER_add_builtin() and run its given initialization function, or load a provider module with the given name and run its provider -entry point, C. +entry point, C. The I can be a path +to a provider module, in that case the provider name as returned +by OSSL_PROVIDER_get0_name() will be the path. Interpretation +of relative paths is platform dependent and they are relative +to the configured "MODULESDIR" directory or the path set in +the environment variable OPENSSL_MODULES if set. OSSL_PROVIDER_try_load() functions like OSSL_PROVIDER_load(), except that it does not disable the fallback providers if the provider cannot be -- 2.47.3