xref: /freebsd/crypto/openssl/doc/man3/DSA_set_method.pod (revision e71b70530d95c4f34d8bdbd78d1242df1ba4a945)
1*e71b7053SJung-uk Kim=pod
2*e71b7053SJung-uk Kim
3*e71b7053SJung-uk Kim=head1 NAME
4*e71b7053SJung-uk Kim
5*e71b7053SJung-uk KimDSA_set_default_method, DSA_get_default_method,
6*e71b7053SJung-uk KimDSA_set_method, DSA_new_method, DSA_OpenSSL - select DSA method
7*e71b7053SJung-uk Kim
8*e71b7053SJung-uk Kim=head1 SYNOPSIS
9*e71b7053SJung-uk Kim
10*e71b7053SJung-uk Kim #include <openssl/dsa.h>
11*e71b7053SJung-uk Kim
12*e71b7053SJung-uk Kim void DSA_set_default_method(const DSA_METHOD *meth);
13*e71b7053SJung-uk Kim
14*e71b7053SJung-uk Kim const DSA_METHOD *DSA_get_default_method(void);
15*e71b7053SJung-uk Kim
16*e71b7053SJung-uk Kim int DSA_set_method(DSA *dsa, const DSA_METHOD *meth);
17*e71b7053SJung-uk Kim
18*e71b7053SJung-uk Kim DSA *DSA_new_method(ENGINE *engine);
19*e71b7053SJung-uk Kim
20*e71b7053SJung-uk Kim DSA_METHOD *DSA_OpenSSL(void);
21*e71b7053SJung-uk Kim
22*e71b7053SJung-uk Kim=head1 DESCRIPTION
23*e71b7053SJung-uk Kim
24*e71b7053SJung-uk KimA B<DSA_METHOD> specifies the functions that OpenSSL uses for DSA
25*e71b7053SJung-uk Kimoperations. By modifying the method, alternative implementations
26*e71b7053SJung-uk Kimsuch as hardware accelerators may be used. IMPORTANT: See the NOTES section for
27*e71b7053SJung-uk Kimimportant information about how these DSA API functions are affected by the use
28*e71b7053SJung-uk Kimof B<ENGINE> API calls.
29*e71b7053SJung-uk Kim
30*e71b7053SJung-uk KimInitially, the default DSA_METHOD is the OpenSSL internal implementation,
31*e71b7053SJung-uk Kimas returned by DSA_OpenSSL().
32*e71b7053SJung-uk Kim
33*e71b7053SJung-uk KimDSA_set_default_method() makes B<meth> the default method for all DSA
34*e71b7053SJung-uk Kimstructures created later.
35*e71b7053SJung-uk KimB<NB>: This is true only whilst no ENGINE has
36*e71b7053SJung-uk Kimbeen set as a default for DSA, so this function is no longer recommended.
37*e71b7053SJung-uk KimThis function is not thread-safe and should not be called at the same time
38*e71b7053SJung-uk Kimas other OpenSSL functions.
39*e71b7053SJung-uk Kim
40*e71b7053SJung-uk KimDSA_get_default_method() returns a pointer to the current default
41*e71b7053SJung-uk KimDSA_METHOD. However, the meaningfulness of this result is dependent on
42*e71b7053SJung-uk Kimwhether the ENGINE API is being used, so this function is no longer
43*e71b7053SJung-uk Kimrecommended.
44*e71b7053SJung-uk Kim
45*e71b7053SJung-uk KimDSA_set_method() selects B<meth> to perform all operations using the key
46*e71b7053SJung-uk KimB<rsa>. This will replace the DSA_METHOD used by the DSA key and if the
47*e71b7053SJung-uk Kimprevious method was supplied by an ENGINE, the handle to that ENGINE will
48*e71b7053SJung-uk Kimbe released during the change. It is possible to have DSA keys that only
49*e71b7053SJung-uk Kimwork with certain DSA_METHOD implementations (eg. from an ENGINE module
50*e71b7053SJung-uk Kimthat supports embedded hardware-protected keys), and in such cases
51*e71b7053SJung-uk Kimattempting to change the DSA_METHOD for the key can have unexpected
52*e71b7053SJung-uk Kimresults. See L<DSA_meth_new> for information on constructing custom DSA_METHOD
53*e71b7053SJung-uk Kimobjects;
54*e71b7053SJung-uk Kim
55*e71b7053SJung-uk KimDSA_new_method() allocates and initializes a DSA structure so that B<engine>
56*e71b7053SJung-uk Kimwill be used for the DSA operations. If B<engine> is NULL, the default engine
57*e71b7053SJung-uk Kimfor DSA operations is used, and if no default ENGINE is set, the DSA_METHOD
58*e71b7053SJung-uk Kimcontrolled by DSA_set_default_method() is used.
59*e71b7053SJung-uk Kim
60*e71b7053SJung-uk Kim=head1 RETURN VALUES
61*e71b7053SJung-uk Kim
62*e71b7053SJung-uk KimDSA_OpenSSL() and DSA_get_default_method() return pointers to the respective
63*e71b7053SJung-uk KimB<DSA_METHOD>s.
64*e71b7053SJung-uk Kim
65*e71b7053SJung-uk KimDSA_set_default_method() returns no value.
66*e71b7053SJung-uk Kim
67*e71b7053SJung-uk KimDSA_set_method() returns non-zero if the provided B<meth> was successfully set as
68*e71b7053SJung-uk Kimthe method for B<dsa> (including unloading the ENGINE handle if the previous
69*e71b7053SJung-uk Kimmethod was supplied by an ENGINE).
70*e71b7053SJung-uk Kim
71*e71b7053SJung-uk KimDSA_new_method() returns NULL and sets an error code that can be
72*e71b7053SJung-uk Kimobtained by L<ERR_get_error(3)> if the allocation
73*e71b7053SJung-uk Kimfails. Otherwise it returns a pointer to the newly allocated structure.
74*e71b7053SJung-uk Kim
75*e71b7053SJung-uk Kim=head1 SEE ALSO
76*e71b7053SJung-uk Kim
77*e71b7053SJung-uk KimL<DSA_new(3)>, L<DSA_new(3)>, L<DSA_meth_new(3)>
78*e71b7053SJung-uk Kim
79*e71b7053SJung-uk Kim=head1 COPYRIGHT
80*e71b7053SJung-uk Kim
81*e71b7053SJung-uk KimCopyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved.
82*e71b7053SJung-uk Kim
83*e71b7053SJung-uk KimLicensed under the OpenSSL license (the "License").  You may not use
84*e71b7053SJung-uk Kimthis file except in compliance with the License.  You can obtain a copy
85*e71b7053SJung-uk Kimin the file LICENSE in the source distribution or at
86*e71b7053SJung-uk KimL<https://www.openssl.org/source/license.html>.
87*e71b7053SJung-uk Kim
88*e71b7053SJung-uk Kim=cut
89