Re: [Openvpn-devel] [PATCH 2/9] Initialize the xkey provider and use it in SSL context

2021-09-23 Thread Arne Schwabe
> #include > #include > @@ -75,6 +76,8 @@ static bool engine_initialized = false; /* GLOBAL */ > > static ENGINE *engine_persist = NULL; /* GLOBAL */ > > +static void *xkey_prov; > + This is under HAVE_OPENSSL_ENGINE instead have HAVE_XKEY_PROVIDER > /* Try to load an engine in a s

[Openvpn-devel] [PATCH 2/9] Initialize the xkey provider and use it in SSL context

2021-09-22 Thread selva . nair
From: Selva Nair - The provider is loaded during crypto initialization and unloaded in uninit. The SSL server and client context are created with properties indicating preference for this provider. This could be made conditional on use of external keys, but it can't hurt if loaded and used