dongwo5110 2019-07-26 15:05
浏览 288

将配置文件用于OpenSSL的EVP API


When using OpenSSL via the command-line, I am able to change the default engine by setting my openssl.cnf (see Sample code below). I now want to change the default engine while using the EVP API, ideally by changing a config file.

The larger context is that I am using a Go wrapper around EVP, which supports neither setting the engine globally nor setting the engine for signing/verifying (the only operations I care about). I am investigating options (e.g. using cgo to set the engine globally or forking the library) involving code changes, but it would be ideal if I could avoid them.


EVP does not seem to read the config file and I can't find/understand documentation online on whether this is possible or not. Is the configuration file automatically loaded (and I'm just doing it wrong?) or do I need to do something like call OPENSSL_INIT_LOAD_CONFIG?

Sample code

openssl_conf = openssl_def

engines = engine_section

pkcs11 = pkcs11_section

engine_id = pkcs11
dynamic_path = /usr/local/Cellar/engine_pkcs11/0.1.8/lib/engines/
MODULE_PATH = /usr/local/Cellar/opensc/0.19.0/lib/pkcs11/
PIN = "123456"
init = 0
$ openssl engine
(rdrand) Intel RDRAND engine
(dynamic) Dynamic engine loading support
(pkcs11) pkcs11 engine
  • 写回答

1条回答 默认 最新

  • duanjuebin2519 2019-07-26 19:00

    Assuming you are using OpenSSL 1.1.0 or later then try inserting the following at the beginning of your program (before you do any other OpenSSL call):

    本回答被题主选为最佳回答 , 对您是否有帮助呢?



    • ¥15 c语言练习:统计词频
    • ¥15 谁能提供rabbitmq,erlang,socat压缩包,记住版本要对应,发到邮箱
    • ¥15 谁能提供rabbitmq,erlang,socat压缩包,记住版本要对应
    • ¥15 Vue3 中使用 `vue-router` 只能跳转到主页面?
    • ¥15 用QT,进行QGIS二次开发,如何在添加栅格图层时,将黑白的矢量图渲染成彩色
    • ¥50 监控摄像头 乐橙和家亲版 保存sd卡的文件怎么打开?视频怎么播放?
    • ¥15 Python的Py-QT扩展库开发GUI
    • ¥60 提问一下周期性信信号的问题
    • ¥15 jtag连接不上fpga怎么办
    • ¥30 c语言停车场模型。。