1*e71b7053SJung-uk Kim=pod 2*e71b7053SJung-uk Kim 3*e71b7053SJung-uk Kim=head1 NAME 4*e71b7053SJung-uk Kim 5*e71b7053SJung-uk KimDSA_set_default_method, DSA_get_default_method, 6*e71b7053SJung-uk KimDSA_set_method, DSA_new_method, DSA_OpenSSL - select DSA method 7*e71b7053SJung-uk Kim 8*e71b7053SJung-uk Kim=head1 SYNOPSIS 9*e71b7053SJung-uk Kim 10*e71b7053SJung-uk Kim #include <openssl/dsa.h> 11*e71b7053SJung-uk Kim 12*e71b7053SJung-uk Kim void DSA_set_default_method(const DSA_METHOD *meth); 13*e71b7053SJung-uk Kim 14*e71b7053SJung-uk Kim const DSA_METHOD *DSA_get_default_method(void); 15*e71b7053SJung-uk Kim 16*e71b7053SJung-uk Kim int DSA_set_method(DSA *dsa, const DSA_METHOD *meth); 17*e71b7053SJung-uk Kim 18*e71b7053SJung-uk Kim DSA *DSA_new_method(ENGINE *engine); 19*e71b7053SJung-uk Kim 20*e71b7053SJung-uk Kim DSA_METHOD *DSA_OpenSSL(void); 21*e71b7053SJung-uk Kim 22*e71b7053SJung-uk Kim=head1 DESCRIPTION 23*e71b7053SJung-uk Kim 24*e71b7053SJung-uk KimA B<DSA_METHOD> specifies the functions that OpenSSL uses for DSA 25*e71b7053SJung-uk Kimoperations. By modifying the method, alternative implementations 26*e71b7053SJung-uk Kimsuch as hardware accelerators may be used. IMPORTANT: See the NOTES section for 27*e71b7053SJung-uk Kimimportant information about how these DSA API functions are affected by the use 28*e71b7053SJung-uk Kimof B<ENGINE> API calls. 29*e71b7053SJung-uk Kim 30*e71b7053SJung-uk KimInitially, the default DSA_METHOD is the OpenSSL internal implementation, 31*e71b7053SJung-uk Kimas returned by DSA_OpenSSL(). 32*e71b7053SJung-uk Kim 33*e71b7053SJung-uk KimDSA_set_default_method() makes B<meth> the default method for all DSA 34*e71b7053SJung-uk Kimstructures created later. 35*e71b7053SJung-uk KimB<NB>: This is true only whilst no ENGINE has 36*e71b7053SJung-uk Kimbeen set as a default for DSA, so this function is no longer recommended. 37*e71b7053SJung-uk KimThis function is not thread-safe and should not be called at the same time 38*e71b7053SJung-uk Kimas other OpenSSL functions. 39*e71b7053SJung-uk Kim 40*e71b7053SJung-uk KimDSA_get_default_method() returns a pointer to the current default 41*e71b7053SJung-uk KimDSA_METHOD. However, the meaningfulness of this result is dependent on 42*e71b7053SJung-uk Kimwhether the ENGINE API is being used, so this function is no longer 43*e71b7053SJung-uk Kimrecommended. 44*e71b7053SJung-uk Kim 45*e71b7053SJung-uk KimDSA_set_method() selects B<meth> to perform all operations using the key 46*e71b7053SJung-uk KimB<rsa>. This will replace the DSA_METHOD used by the DSA key and if the 47*e71b7053SJung-uk Kimprevious method was supplied by an ENGINE, the handle to that ENGINE will 48*e71b7053SJung-uk Kimbe released during the change. It is possible to have DSA keys that only 49*e71b7053SJung-uk Kimwork with certain DSA_METHOD implementations (eg. from an ENGINE module 50*e71b7053SJung-uk Kimthat supports embedded hardware-protected keys), and in such cases 51*e71b7053SJung-uk Kimattempting to change the DSA_METHOD for the key can have unexpected 52*e71b7053SJung-uk Kimresults. See L<DSA_meth_new> for information on constructing custom DSA_METHOD 53*e71b7053SJung-uk Kimobjects; 54*e71b7053SJung-uk Kim 55*e71b7053SJung-uk KimDSA_new_method() allocates and initializes a DSA structure so that B<engine> 56*e71b7053SJung-uk Kimwill be used for the DSA operations. If B<engine> is NULL, the default engine 57*e71b7053SJung-uk Kimfor DSA operations is used, and if no default ENGINE is set, the DSA_METHOD 58*e71b7053SJung-uk Kimcontrolled by DSA_set_default_method() is used. 59*e71b7053SJung-uk Kim 60*e71b7053SJung-uk Kim=head1 RETURN VALUES 61*e71b7053SJung-uk Kim 62*e71b7053SJung-uk KimDSA_OpenSSL() and DSA_get_default_method() return pointers to the respective 63*e71b7053SJung-uk KimB<DSA_METHOD>s. 64*e71b7053SJung-uk Kim 65*e71b7053SJung-uk KimDSA_set_default_method() returns no value. 66*e71b7053SJung-uk Kim 67*e71b7053SJung-uk KimDSA_set_method() returns non-zero if the provided B<meth> was successfully set as 68*e71b7053SJung-uk Kimthe method for B<dsa> (including unloading the ENGINE handle if the previous 69*e71b7053SJung-uk Kimmethod was supplied by an ENGINE). 70*e71b7053SJung-uk Kim 71*e71b7053SJung-uk KimDSA_new_method() returns NULL and sets an error code that can be 72*e71b7053SJung-uk Kimobtained by L<ERR_get_error(3)> if the allocation 73*e71b7053SJung-uk Kimfails. Otherwise it returns a pointer to the newly allocated structure. 74*e71b7053SJung-uk Kim 75*e71b7053SJung-uk Kim=head1 SEE ALSO 76*e71b7053SJung-uk Kim 77*e71b7053SJung-uk KimL<DSA_new(3)>, L<DSA_new(3)>, L<DSA_meth_new(3)> 78*e71b7053SJung-uk Kim 79*e71b7053SJung-uk Kim=head1 COPYRIGHT 80*e71b7053SJung-uk Kim 81*e71b7053SJung-uk KimCopyright 2000-2016 The OpenSSL Project Authors. All Rights Reserved. 82*e71b7053SJung-uk Kim 83*e71b7053SJung-uk KimLicensed under the OpenSSL license (the "License"). You may not use 84*e71b7053SJung-uk Kimthis file except in compliance with the License. You can obtain a copy 85*e71b7053SJung-uk Kimin the file LICENSE in the source distribution or at 86*e71b7053SJung-uk KimL<https://www.openssl.org/source/license.html>. 87*e71b7053SJung-uk Kim 88*e71b7053SJung-uk Kim=cut 89