Lines Matching +full:no +full:- +full:dynamic +full:- +full:engine

5 config - OpenSSL CONF library configuration files
24 between the elements of a line, have no significance. A comment starts
26 is the first non-space character in a line, the entire line is ignored.
45 available on systems with POSIX IO support.)  Any sub-directories found
76 B<true> or B<on>, then C<foo$bar> is a single seven-character name nad
121 In order to support this, commands like L<openssl-req(1)> ignore any
203  ... engine properties here ...
231  OPENSSL_CONF=example.cnf openssl asn1parse -genstr OID:1.2.3.4.1
244 for that provider. The provider-specific section is used to specify how
273 All parameters in the section as well as sub-sections are made
278 If no providers are activated explicitly, the default one is activated implicitly.
279 See L<OSSL_PROVIDER-default(7)> for more details.
301 The value is a boolean that can be B<yes> or B<no>.  If the value is
306 If the value is B<no>, nothing happens. Using this name is deprecated, and
331 to impose system-wide minimum TLS and DTLS protocol versions:
337 The minimum TLS protocol is applied to B<SSL_CTX> objects that are TLS-based,
338 and the minimum DTLS protocol to those are DTLS-based.
349  RSA.Certificate = server-rsa.pem
350  ECDSA.Certificate = server-ecdsa.pem
352 =head2 Engine Configuration
355 containing the list of ENGINE configurations.
356 As with the providers, each name in this section identifies an engine
357 with the configuration for that engine.
358 The engine-specific section is used to specify how to load the engine,
361 Within an engine section, the following names have meaning:
379 This loads and adds an ENGINE from the given path. It is equivalent to
381 with value B<2> and B<LOAD> to the dynamic ENGINE.  If this is not the
383 dynamic ENGINE using ctrl commands.
387 This specifies whether to initialize the ENGINE. If the value is B<0> the
388 ENGINE will not be initialized, if the value is B<1> an attempt is made
390 the ENGINE immediately. If the B<init> command is not present then an
391 attempt will be made to initialize the ENGINE after all commands in its
396 This sets the default algorithms an ENGINE will supply using the function
402 sent to the ENGINE, and the value is the argument passed with the command.
403 The special value B<EMPTY> means no value is sent with the command.
430  random = CTR-DRBG
436 =item B<CTR-DRBG>
438 =item B<HASH-DRBG>
440 =item B<HMAC-DRBG>
446 This specifies what cipher a B<CTR-DRBG> random bit generator will use.
448 The default value is B<AES-256-CTR>.
452 This specifies what digest the B<HASH-DRBG> or B<HMAC-DRBG> random bit
462 This sets the randomness source that should be used.  By default B<SEED-SRC>
525 Ignored in set-user-ID and set-group-ID programs.
530 Ignored in set-user-ID and set-group-ID programs.
535 Ignored in set-user-ID and set-group-ID programs.
545 There is no way to include characters using the octal B<\nnn> form. Strings
560 could be used in pathnames, only the double-quote character was recognized,
561 and comments began with a semi-colon.
567 L<openssl-x509(1)>, L<openssl-req(1)>, L<openssl-ca(1)>,
568 L<openssl-fipsinstall(1)>,
578 Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.