Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

nginx cannot support provider in openssl3.0 #65

Open
foxriver1025 opened this issue Jun 8, 2023 · 4 comments
Open

nginx cannot support provider in openssl3.0 #65

foxriver1025 opened this issue Jun 8, 2023 · 4 comments

Comments

@foxriver1025
Copy link

Is there any plan to support the provider mechanism of openssl3.0?

@bibrani-github
Copy link

bibrani-github commented Jun 8, 2023 via email

@foxriver1025
Copy link
Author

@bibrani-github Thanks for your reply. I mean can nginx load qatprovider instead of qatengine.
Old versions of OpenSSL supported the ENGINE API. In nginx this is enabled through the ssl_engine directive.
In OpenSSL 3.0 the authors introduced a "Provider API" which is intended to replace the old ENGINE API. It works in a similar way. When using the CLI , I can add -provider qatprovider base to the arguments.
So can this asynch_mode_nginx support qatprovider?

@ShuaiYuan21
Copy link
Contributor

@foxriver1025 Currently, we only support OpenSSL Engine API. We currently have no plans to support the provider API. OpenSSL engine API is still supported in OpenSSL 3.0, even the OpenSSL 1.1.1 will EOL in Sep. 2023. You can still use the Engine API before OpenSSL 4.0, which won't be released until much later. openssl/openssl#20395

@foxriver1025
Copy link
Author

@ShuaiYuan21 Thanks. I get it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants