diff options
author | Richard Levitte <levitte@openssl.org> | 2020-05-12 08:46:23 +0200 |
---|---|---|
committer | Matt Caswell <matt@openssl.org> | 2020-05-13 17:21:58 +0100 |
commit | 05aa8790ac1ef2bb39c15ae241a591704664039c (patch) | |
tree | 4fda5d8623ab69abcd5c7eed3cbd3ab740e4ed28 /providers/common/include | |
parent | 484c24c8d7318cc36f9b3c2b7b55cf5ac91619ca (diff) |
PROV: Add a proper provider context structure for OpenSSL providers
The provider context structure is made to include the following information:
- The core provider handle (first argument to the provider init
function). This handle is meant to be used in all upcalls that need
it.
- A library context, used for any libcrypto calls that need it, done in
the provider itself.
Regarding the library context, that's generally only needed if the
provider makes any libcrypto calls, i.e. is linked with libcrypto. That
happens to be the case for all OpenSSL providers, but is applicable for
other providers that use libcrypto internally as well.
The normal thing to do for a provider init function is to create its own
library context. For a provider that's meant to become a dynamically
loadable module, this is what MUST be done.
However, we do not do that in the default provider; it uses the library
context associated with the core provider handle instead. This is
permissible, although generally discouraged, as long as the provider in
question is guaranteed to be built-in, into libcrypto or into the
application that uses it.
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/11803)
Diffstat (limited to 'providers/common/include')
-rw-r--r-- | providers/common/include/prov/provider_ctx.h | 18 |
1 files changed, 17 insertions, 1 deletions
diff --git a/providers/common/include/prov/provider_ctx.h b/providers/common/include/prov/provider_ctx.h index 365667d19e..0984f13635 100644 --- a/providers/common/include/prov/provider_ctx.h +++ b/providers/common/include/prov/provider_ctx.h @@ -7,8 +7,24 @@ * https://www.openssl.org/source/license.html */ +#include <openssl/types.h> +#include <openssl/crypto.h> + +typedef struct prov_ctx_st { + const OSSL_PROVIDER *provider; + OPENSSL_CTX *libctx; /* For all provider modules */ +} PROV_CTX; + /* * To be used anywhere the library context needs to be passed, such as to * fetching functions. */ -#define PROV_LIBRARY_CONTEXT_OF(provctx) (provctx) +#define PROV_LIBRARY_CONTEXT_OF(provctx) \ + PROV_CTX_get0_library_context((provctx)) + +PROV_CTX *PROV_CTX_new(void); +void PROV_CTX_free(PROV_CTX *ctx); +void PROV_CTX_set0_library_context(PROV_CTX *ctx, OPENSSL_CTX *libctx); +void PROV_CTX_set0_provider(PROV_CTX *ctx, const OSSL_PROVIDER *libctx); +OPENSSL_CTX *PROV_CTX_get0_library_context(PROV_CTX *ctx); +const OSSL_PROVIDER *PROV_CTX_get0_provider(PROV_CTX *ctx); |