Inbuilt legacy provider

[aniljadaun]

Hi

Is it possible to create in-built legacy provider with openssl 3.0 static libraries for windows ?

[mattcaswell]

Configure with no-shared no-module, e.g.

perl Configure no-shared no-module

[mattcaswell]

This means it is unable to find the fips.dll. Have you installed it in the appropriate modules directory? BTW you can query the location of the modules directory from your application via const char *modulesdir = OpenSSL_version(OPENSSL_MODULES_DIR);. Alternatively you can set the OPENSSL_CONF environment variable to point to the location of this directory.

[aniljadaun]

Hi @mattcaswell

OSSL_LIB_CTX_load_config(NULL, "D:\\outlibsopenssl\\SSL\\openssl.cnf")) 
const char* default_search_path = "D:\\fipsdll";
OSSL_PROVIDER_set_default_search_path(NULL, default_search_path);
fips = OSSL_PROVIDER_load(NULL, "fips");

Above code works for me if i use openssl libs which has module created as fips.dll and legacy.dll .separate from libcrypto and libssl .

In the current scenario i am using inbuilt legacy module and using the fips module created previously . fips module is not getting loaded for me .
const char *modulesdir = OpenSSL_version(OPENSSL_MODULES_DIR);.
This references to the path on which inbuilt legacy module was created. " D:\opensslnolegacy\Lib\x64\Release\lib\ossl-modules"

Error is same as before
MODULESDIR: "D:\opensslnolegacy\Lib\x64\Release\lib\ossl-modules"
A0330000:error:07880025:common libcrypto routines:provider_init:reason(37):crypto\provider_core.c:914:name=fips

[aniljadaun]

creating the inbuilt legacy module didn't generate any fips module separately , so i am using the fips.dll which i created previously.

I also tried adding fips.dll to the path referneced in openssl_modules_dir also added environment as specified by you by creating environment variable. But modulesdir still refrences the same folder

[mattcaswell]

Alternatively you can set the OPENSSL_CONF environment variable to point to the location of this directory.

Sorry - I gave you the wrong environment variable name. The environment variable to use is OPENSSL_MODULES. Set it to the name of the directory that contains fips.dll.

[aniljadaun]

Hi @mattcaswell

Unfortunately this is not working for us. Though just replacing with openssl libs with no inbuilt legacy module works. This looks like a bug to me .Can you please check at your end , if this works for you ? i have shared details at #21444 . We can close this one and track it from other discussion.

Thanks alot for your help and guidance till now. :)