EVP_set_default_properties.3ossl - Man Page

Set default properties for future algorithm fetches


 #include <openssl/evp.h>

 int EVP_set_default_properties(OSSL_LIB_CTX *libctx, const char *propq);
 int EVP_default_properties_enable_fips(OSSL_LIB_CTX *libctx, int enable);
 int EVP_default_properties_is_fips_enabled(OSSL_LIB_CTX *libctx);


EVP_set_default_properties() sets the default properties for all future EVP algorithm fetches, implicit as well as explicit. See “ALGORITHM FETCHING” in crypto(7) for information about implicit and explicit fetching.

EVP_set_default_properties stores the properties given with the string propq among the EVP data that's been stored in the library context given with libctx (NULL signifies the default library context).

Any previous default property for the specified library context will be dropped.

EVP_default_properties_enable_fips() sets the 'fips=yes' to be a default property if enable is non zero, otherwise it clears 'fips' from the default property query for the given libctx. It merges the fips default property query with any existing query strings that have been set via EVP_set_default_properties().

EVP_default_properties_is_fips_enabled() indicates if 'fips=yes' is a default property for the given libctx.

Return Values

EVP_set_default_properties() and  EVP_default_properties_enable_fips() return 1 on success, or 0 on failure. An error is placed on the error stack if a failure occurs.

EVP_default_properties_is_fips_enabled() returns 1 if the 'fips=yes' default property is set for the given libctx, otherwise it returns 0.

See Also



The functions described here were added in OpenSSL 3.0.

Referenced By

crypto.7ossl(7), migration_guide.7ossl(7), openssl.cnf(5), OSSL_LIB_CTX.3ossl(3), provider.7ossl(7).

The man pages EVP_default_properties_enable_fips.3ossl(3) and EVP_default_properties_is_fips_enabled.3ossl(3) are aliases of EVP_set_default_properties.3ossl(3).

2021-09-09 3.0.0 OpenSSL