deploy openssl/openssl@32a7848 to 3.4

3.4/man5/config/index.html

@@ -58,7 +58,7 @@
 
 [foo_provider]
 identity = my_fips_module
-</code></pre></div></li><li><p><strong>module</strong></p><p>Specifies the pathname of the module (typically a shared library) to load.</p></li><li><p><strong>activate</strong></p><p>If present and set to one of the values yes, on, true or 1, then the associated provider will be activated. Conversely, setting this value to no, off, false, or 0 will prevent the provider from being activated. Settings can be given in lower or uppercase. Setting activate to any other setting, or omitting a setting value will result in an error.</p><p>&#x3d; item <strong>soft_load</strong></p><p>If enabled, informs the library to clear the error stack on failure to activate requested provider. A value of 1, yes, true or on (in lower or uppercase) will activate this setting, while a value of 0, no, false, of off (again in lower or uppercase) will disable this setting. Any other value will produce an error. Note this setting defaults to off if not provided</p></li></ul><p>All parameters in the section as well as sub-sections are made available to the provider.</p><h4 id=default-provider-and-its-activation>Default provider and its activation<a class=headerlink href=#default-provider-and-its-activation title="Permanent link">&para;</a></h4><p>If no providers are activated explicitly, the default one is activated implicitly. See <a href=../../man7/OSSL_PROVIDER-default/ >OSSL_PROVIDER-default(7)</a> for more details.</p><p>If you add a section explicitly activating any other provider(s), you most probably need to explicitly activate the default provider, otherwise it becomes unavailable in openssl. It may make the system remotely unavailable.</p><h3 id=evp-configuration>EVP Configuration<a class=headerlink href=#evp-configuration title="Permanent link">&para;</a></h3><p>The name <strong>alg_section</strong> in the initialization section names the section containing algorithmic properties when using the <strong>EVP</strong> API.</p><p>Within the algorithm properties section, the following names have meaning:</p><ul><li><p><strong>default_properties</strong></p><p>The value may be anything that is acceptable as a property query string for EVP_set_default_properties().</p></li><li><p><strong>fips_mode</strong> (deprecated)</p><p>The value is a boolean that can be <strong>yes</strong> or <strong>no</strong>. If the value is <strong>yes</strong>, this is exactly equivalent to:</p><div class=highlight><pre><span></span><code>default_properties = fips=yes
+</code></pre></div></li><li><p><strong>module</strong></p><p>Specifies the pathname of the module (typically a shared library) to load.</p></li><li><p><strong>activate</strong></p><p>If present and set to one of the values yes, on, true or 1, then the associated provider will be activated. Conversely, setting this value to no, off, false, or 0 will prevent the provider from being activated. Settings can be given in lower or uppercase. Setting activate to any other setting, or omitting a setting value will result in an error.</p><p>&#x3d; item <strong>soft_load</strong></p><p>If enabled, informs the library to clear the error stack on failure to activate requested provider. A value of 1, yes, true or on (in lower or uppercase) will activate this setting, while a value of 0, no, false, or off (again in lower or uppercase) will disable this setting. Any other value will produce an error. Note this setting defaults to off if not provided</p></li></ul><p>All parameters in the section as well as sub-sections are made available to the provider.</p><h4 id=default-provider-and-its-activation>Default provider and its activation<a class=headerlink href=#default-provider-and-its-activation title="Permanent link">&para;</a></h4><p>If no providers are activated explicitly, the default one is activated implicitly. See <a href=../../man7/OSSL_PROVIDER-default/ >OSSL_PROVIDER-default(7)</a> for more details.</p><p>If you add a section explicitly activating any other provider(s), you most probably need to explicitly activate the default provider, otherwise it becomes unavailable in openssl. It may make the system remotely unavailable.</p><h3 id=evp-configuration>EVP Configuration<a class=headerlink href=#evp-configuration title="Permanent link">&para;</a></h3><p>The name <strong>alg_section</strong> in the initialization section names the section containing algorithmic properties when using the <strong>EVP</strong> API.</p><p>Within the algorithm properties section, the following names have meaning:</p><ul><li><p><strong>default_properties</strong></p><p>The value may be anything that is acceptable as a property query string for EVP_set_default_properties().</p></li><li><p><strong>fips_mode</strong> (deprecated)</p><p>The value is a boolean that can be <strong>yes</strong> or <strong>no</strong>. If the value is <strong>yes</strong>, this is exactly equivalent to:</p><div class=highlight><pre><span></span><code>default_properties = fips=yes
 </code></pre></div><p>If the value is <strong>no</strong>, nothing happens. Using this name is deprecated, and if used, it must be the only name in the section.</p></li></ul><h3 id=ssl-configuration>SSL Configuration<a class=headerlink href=#ssl-configuration title="Permanent link">&para;</a></h3><p>The name <strong>ssl_conf</strong> in the initialization section names the section containing the list of SSL/TLS configurations. As with the providers, each name in this section identifies a section with the configuration for that name. For example:</p><div class=highlight><pre><span></span><code>[ssl_configuration]
 server = server_tls_config
 client = client_tls_config