Skip to content

Support OpenSSL v3 store providers#3488

Open
amananas wants to merge 2 commits intoeclipse-mosquitto:developfrom
amananas:openssl3-store-provider
Open

Support OpenSSL v3 store providers#3488
amananas wants to merge 2 commits intoeclipse-mosquitto:developfrom
amananas:openssl3-store-provider

Conversation

@amananas
Copy link
Copy Markdown

@amananas amananas commented Feb 10, 2026

OpenSSL3 introduced the providers mechanic, and obsoleted the engine mechanics. The OpenSSL applications now leverage the store provider mechanics to remove the key type selection: the key type is inferred from the key URI.

This change adds support for the OpenSSL store mechanics when available to load private keys, and makes it the default behavior according to OpenSSL guidelines.

Close #3115


Thank you for contributing your time to the Mosquitto project!

Before you go any further, please note that we cannot accept contributions if
you haven't signed the Eclipse Contributor Agreement.
If you aren't able to do that, or just don't want to, please describe your bug
fix/feature change in an issue. For simple bug fixes it is can be just as easy
for us to be told about the problem and then go fix it directly.

Then please check the following list of things we ask for in your pull request:

  • Have you signed the Eclipse Contributor Agreement, using the same email address as you used in your commits?
  • Do each of your commits have a "Signed-off-by" line, with the correct email address? Use "git commit -s" to generate this line for you.
  • If you are contributing a new feature, is your work based off the develop branch?
  • If you are contributing a bugfix, is your work based off the fixes branch?
  • Have you added an explanation of what your changes do and why you'd like us to include them?
  • Have you successfully run make test with your changes locally?

This change makes sure the pkey variable is declared in the scope that
uses it.

Signed-off-by: Alexandre Besnard <alexandre.besnard@softathome.com>
OpenSSL3 introduced the providers mechanic, and obsoleted the engine
mechanics. The OpenSSL applications now leverage the store provider
mechanics to remove the key type selection: the key type is inferred
from the key URI.

This change adds support for the OpenSSL store mechanics when available
to load private keys, and makes it the default behavior according to
OpenSSL guidelines.

Close eclipse-mosquitto#3115

Signed-off-by: Alexandre Besnard <alexandre.besnard@softathome.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant