Skip to content

openssl 3.0 & 3.0.7 - how to enable legacy provider? #20112

@prasad1240

Description

@prasad1240

Hi Team,

Downloaded latest openssl 3.0 & 3.0.7 code and executed below command in mac

Command:-
./configure ios64-xcrun no-tests -no-shared enable-weak-ssl-ciphers

Added code in our project

        int legacyValue = OSSL_PROVIDER_available(NULL, "legacy");
       OSSL_PROVIDER *legacy_new = OSSL_PROVIDER_try_load(NULL, "legacy", 1);
OSSL_PROVIDER *defaultProvider_new = OSSL_PROVIDER_try_load(NULL, "default", 1);

    /* Load Multiple providers into the default (NULL) library context */
       legacy = OSSL_PROVIDER_load(NULL, "legacy");
       if (legacy == NULL) {
           printf("Failed to load Legacy provider\n");
       }

Now legacy provider is not loading.

Could you please help us?
Can someone please review my changes and see what might still be missing?

Command:- perl configdata.pm --dump

`
Command line (with current working directory = .):

perl ./Configure ios64-xcrun no-tests -no-shared --openssldir=/usr/local/ssl OPENSSL_CONF=./openssl.cnf enable-weak-ssl-ciphers

Perl information
perl
5.30.3 for darwin-thread-multi-2level
Enabled features
aria
asm
autoalginit
autoerrinit
autoload-config
bf
blake2
bulk
cached-fetch
camellia
cast
chacha
cmac
cmp
cms
comp
ct
deprecated
des
dgram
dh
dsa
dso
dtls
ec
ec2m
ecdh
ecdsa
err
filenames
gost
idea
legacy
makedepend
md4
mdc2
module
multiblock
nextprotoneg
ocb
ocsp
pic
pinshared
poly1305
posix-io
psk
rc2
rc4
rdrand
rfc3779
rmd160
scrypt
secure-memory
seed
siphash
siv
sm2
sm3
sm4
sock
srp
srtp
sse2
ssl
ssl-trace
static-engine
stdio
threads
tls
ts
ui-console
weak-ssl-ciphers
whirlpool
tls1
tls1-method
tls1_1
tls1_1-method
tls1_2
tls1_2-method
tls1_3
dtls1
dtls1-method
dtls1_2
dtls1_2-method
Disabled features
acvp-tests [cascade] OPENSSL_NO_ACVP_TESTS
afalgeng [cascade] OPENSSL_NO_AFALGENG
asan [default] OPENSSL_NO_ASAN
async [config] OPENSSL_NO_ASYNC
buildtest-c++ [default]
capieng [cascade] OPENSSL_NO_CAPIENG
crypto-mdebug [default] OPENSSL_NO_CRYPTO_MDEBUG
devcryptoeng [default] OPENSSL_NO_DEVCRYPTOENG
dynamic-engine [cascade]
ec_nistp_64_gcc_128 [default] OPENSSL_NO_EC_NISTP_64_GCC_128
egd [default] OPENSSL_NO_EGD
engine [config] OPENSSL_NO_ENGINE (skip engines, crypto/engine)
external-tests [default] OPENSSL_NO_EXTERNAL_TESTS
fips [default]
fips-securitychecks [cascade] OPENSSL_NO_FIPS_SECURITYCHECKS
fuzz-afl [default] OPENSSL_NO_FUZZ_AFL
fuzz-libfuzzer [default] OPENSSL_NO_FUZZ_LIBFUZZER
ktls [default] OPENSSL_NO_KTLS
loadereng [cascade] OPENSSL_NO_LOADERENG
md2 [default] OPENSSL_NO_MD2 (skip crypto/md2)
msan [default] OPENSSL_NO_MSAN
padlockeng [cascade] OPENSSL_NO_PADLOCKENG
rc5 [default] OPENSSL_NO_RC5 (skip crypto/rc5)
sctp [default] OPENSSL_NO_SCTP
shared [option]
tests [option] OPENSSL_NO_TESTS
trace [default] OPENSSL_NO_TRACE
ubsan [default] OPENSSL_NO_UBSAN
unit-test [default] OPENSSL_NO_UNIT_TEST
uplink [no uplink_arch] OPENSSL_NO_UPLINK
zlib [default]
zlib-dynamic [default]
ssl3 [default] OPENSSL_NO_SSL3
ssl3-method [default] OPENSSL_NO_SSL3_METHOD
Config target attributes
AR => "ar",
ARFLAGS => "qc",
CC => "xcrun -sdk iphoneos cc",
CFLAGS => "-O3",
HASHBANGPERL => "/usr/bin/env perl",
RANLIB => "ranlib -c",
RC => "windres",
asm_arch => "aarch64",
bn_ops => "SIXTY_FOUR_BIT_LONG RC4_CHAR",
build_file => "Makefile",
build_scheme => [ "unified", "unix" ],
cflags => "-arch arm64 -mios-version-min=7.0.0 -fno-common",
cppflags => "-D_REENTRANT",
defines => [ "OPENSSL_BUILDING_OPENSSL" ],
disable => [ "engine", "async" ],
dso_scheme => "dlfcn",
enable => [ ],
includes => [ ],
lflags => "-Wl,-search_paths_first",
lib_cflags => "",
lib_cppflags => "",
lib_defines => [ ],
module_cflags => "-fPIC",
module_cxxflags => undef,
module_ldflags => "-bundle",
perl_platform => "Unix",
perlasm_scheme => "ios64",
shared_cflag => "-fPIC",
shared_defines => [ ],
shared_extension => ".$(SHLIB_VERSION_NUMBER).dylib",
shared_ldflag => "-dynamiclib -current_version $(SHLIB_VERSION_NUMBER) -compatibility_version $(SHLIB_VERSION_NUMBER)",
shared_rcflag => "",
shared_sonameflag => "-install_name $(libdir)/",
shared_target => "darwin-shared",
sys_id => "iOS",
thread_defines => [ ],
thread_scheme => "pthreads",
unistd => "<unistd.h>",
Recorded environment
AR =
ARFLAGS =
AS =
ASFLAGS =
BUILDFILE =
CC =
CFLAGS =
CPP =
CPPDEFINES =
CPPFLAGS =
CPPINCLUDES =
CROSS_COMPILE =
CXX =
CXXFLAGS =
HASHBANGPERL =
LD =
LDFLAGS =
LDLIBS =
MT =
MTFLAGS =
OPENSSL_LOCAL_CONFIG_DIR =
PERL =
RANLIB =
RC =
RCFLAGS =
RM =
WINDRES =
__CNF_CFLAGS =
__CNF_CPPDEFINES =
__CNF_CPPFLAGS =
__CNF_CPPINCLUDES =
__CNF_CXXFLAGS =
__CNF_LDFLAGS =
__CNF_LDLIBS =
Makevars
AR = ar
ARFLAGS = qc
CC = xcrun -sdk iphoneos cc
CFLAGS = -O3
CPPDEFINES =
CPPFLAGS =
CPPINCLUDES =
CXXFLAGS =
HASHBANGPERL = /usr/bin/env perl
LDFLAGS =
LDLIBS =
PERL = perl
RANLIB = ranlib -c
RC = windres
RCFLAGS =
`

Now legacy provider is not loading.

Could you please help us?
Can someone please review my changes and see what might still be missing?

Metadata

Metadata

Assignees

No one assigned

    Labels

    resolved: answeredThe issue contained a question which has been answeredtriaged: questionThe issue contains a question

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions