From: Tomas Mraz Date: Wed, 9 Jun 2021 15:04:12 +0000 (+0200) Subject: Document that provider name can be a full path X-Git-Tag: openssl-3.0.0-beta1~101 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b19fcc66d382357617744690dc3363947de2cb6f;p=thirdparty%2Fopenssl.git Document that provider name can be a full path Reviewed-by: Matt Caswell Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/15680) --- diff --git a/doc/man1/openssl.pod b/doc/man1/openssl.pod index 3b47ae97298..b6f4029a678 100644 --- a/doc/man1/openssl.pod +++ b/doc/man1/openssl.pod @@ -651,7 +651,12 @@ the PKCS#11 URI as defined in RFC 7512 should be possible to use directly: =item B<-provider> I -Load and initialize the provider identified by I. +Load and initialize the provider identified by I. The I +can be also a path to the provider module. In that case the provider name +will be the specified path and not just the provider module name. +Interpretation of relative paths is platform specific. The configured +"MODULESDIR" path, B environment variable, or the path +specified by B<-provider-path> is prepended to relative paths. See L for a more detailed description. =item B<-provider-path> I diff --git a/doc/man3/OSSL_PROVIDER.pod b/doc/man3/OSSL_PROVIDER.pod index 2b014c46717..bc4cc1641ea 100644 --- a/doc/man3/OSSL_PROVIDER.pod +++ b/doc/man3/OSSL_PROVIDER.pod @@ -81,7 +81,12 @@ OSSL_PROVIDER_load() loads and initializes a provider. This may simply initialize a provider that was previously added with OSSL_PROVIDER_add_builtin() and run its given initialization function, or load a provider module with the given name and run its provider -entry point, C. +entry point, C. The I can be a path +to a provider module, in that case the provider name as returned +by OSSL_PROVIDER_get0_name() will be the path. Interpretation +of relative paths is platform dependent and they are relative +to the configured "MODULESDIR" directory or the path set in +the environment variable OPENSSL_MODULES if set. OSSL_PROVIDER_try_load() functions like OSSL_PROVIDER_load(), except that it does not disable the fallback providers if the provider cannot be