1e1051a39Sopenharmony_ci=pod 2e1051a39Sopenharmony_ci 3e1051a39Sopenharmony_ci=head1 NAME 4e1051a39Sopenharmony_ci 5e1051a39Sopenharmony_ciopenssl-env - OpenSSL environment variables 6e1051a39Sopenharmony_ci 7e1051a39Sopenharmony_ci=head1 DESCRIPTION 8e1051a39Sopenharmony_ci 9e1051a39Sopenharmony_ciThe OpenSSL libraries use environment variables to override the 10e1051a39Sopenharmony_cicompiled-in default paths for various data. 11e1051a39Sopenharmony_ciTo avoid security risks, the environment is usually not consulted when 12e1051a39Sopenharmony_cithe executable is set-user-ID or set-group-ID. 13e1051a39Sopenharmony_ci 14e1051a39Sopenharmony_ci=over 4 15e1051a39Sopenharmony_ci 16e1051a39Sopenharmony_ci=item B<CTLOG_FILE> 17e1051a39Sopenharmony_ci 18e1051a39Sopenharmony_ciSpecifies the path to a certificate transparency log list. 19e1051a39Sopenharmony_ciSee L<CTLOG_STORE_new(3)>. 20e1051a39Sopenharmony_ci 21e1051a39Sopenharmony_ci=item B<OPENSSL> 22e1051a39Sopenharmony_ci 23e1051a39Sopenharmony_ciSpecifies the path to the B<openssl> executable. Used by 24e1051a39Sopenharmony_cithe B<rehash> script (see L<openssl-rehash(1)/Script Configuration>) 25e1051a39Sopenharmony_ciand by the B<CA.pl> script (see L<CA.pl(1)/NOTES> 26e1051a39Sopenharmony_ci 27e1051a39Sopenharmony_ci=item B<OPENSSL_CONF>, B<OPENSSL_CONF_INCLUDE> 28e1051a39Sopenharmony_ci 29e1051a39Sopenharmony_ciSpecifies the path to a configuration file and the directory for 30e1051a39Sopenharmony_ciincluded files. 31e1051a39Sopenharmony_ciSee L<config(5)>. 32e1051a39Sopenharmony_ci 33e1051a39Sopenharmony_ci=item B<OPENSSL_CONFIG> 34e1051a39Sopenharmony_ci 35e1051a39Sopenharmony_ciSpecifies a configuration option and filename for the B<req> and B<ca> 36e1051a39Sopenharmony_cicommands invoked by the B<CA.pl> script. 37e1051a39Sopenharmony_ciSee L<CA.pl(1)>. 38e1051a39Sopenharmony_ci 39e1051a39Sopenharmony_ci=item B<OPENSSL_ENGINES> 40e1051a39Sopenharmony_ci 41e1051a39Sopenharmony_ciSpecifies the directory from which dynamic engines are loaded. 42e1051a39Sopenharmony_ciSee L<openssl-engine(1)>. 43e1051a39Sopenharmony_ci 44e1051a39Sopenharmony_ci=item B<OPENSSL_MALLOC_FD>, B<OPENSSL_MALLOC_FAILURES> 45e1051a39Sopenharmony_ci 46e1051a39Sopenharmony_ciIf built with debugging, this allows memory allocation to fail. 47e1051a39Sopenharmony_ciSee L<OPENSSL_malloc(3)>. 48e1051a39Sopenharmony_ci 49e1051a39Sopenharmony_ci=item B<OPENSSL_MODULES> 50e1051a39Sopenharmony_ci 51e1051a39Sopenharmony_ciSpecifies the directory from which cryptographic providers are loaded. 52e1051a39Sopenharmony_ciEquivalently, the generic B<-provider-path> command-line option may be used. 53e1051a39Sopenharmony_ci 54e1051a39Sopenharmony_ci=item B<OPENSSL_WIN32_UTF8> 55e1051a39Sopenharmony_ci 56e1051a39Sopenharmony_ciIf set, then L<UI_OpenSSL(3)> returns UTF-8 encoded strings, rather than 57e1051a39Sopenharmony_ciones encoded in the current code page, and 58e1051a39Sopenharmony_cithe L<openssl(1)> program also transcodes the command-line parameters 59e1051a39Sopenharmony_cifrom the current code page to UTF-8. 60e1051a39Sopenharmony_ciThis environment variable is only checked on Microsoft Windows platforms. 61e1051a39Sopenharmony_ci 62e1051a39Sopenharmony_ci=item B<RANDFILE> 63e1051a39Sopenharmony_ci 64e1051a39Sopenharmony_ciThe state file for the random number generator. 65e1051a39Sopenharmony_ciThis should not be needed in normal use. 66e1051a39Sopenharmony_ciSee L<RAND_load_file(3)>. 67e1051a39Sopenharmony_ci 68e1051a39Sopenharmony_ci=item B<SSL_CERT_DIR>, B<SSL_CERT_FILE> 69e1051a39Sopenharmony_ci 70e1051a39Sopenharmony_ciSpecify the default directory or file containing CA certificates. 71e1051a39Sopenharmony_ciSee L<SSL_CTX_load_verify_locations(3)>. 72e1051a39Sopenharmony_ci 73e1051a39Sopenharmony_ci=item B<TSGET> 74e1051a39Sopenharmony_ci 75e1051a39Sopenharmony_ciAdditional arguments for the L<tsget(1)> command. 76e1051a39Sopenharmony_ci 77e1051a39Sopenharmony_ci=item B<OPENSSL_ia32cap>, B<OPENSSL_sparcv9cap>, B<OPENSSL_ppccap>, B<OPENSSL_armcap>, B<OPENSSL_s390xcap> 78e1051a39Sopenharmony_ci 79e1051a39Sopenharmony_ciOpenSSL supports a number of different algorithm implementations for 80e1051a39Sopenharmony_civarious machines and, by default, it determines which to use based on the 81e1051a39Sopenharmony_ciprocessor capabilities and run time feature enquiry. These environment 82e1051a39Sopenharmony_civariables can be used to exert more control over this selection process. 83e1051a39Sopenharmony_ciSee L<OPENSSL_ia32cap(3)>, L<OPENSSL_s390xcap(3)>. 84e1051a39Sopenharmony_ci 85e1051a39Sopenharmony_ci=item B<NO_PROXY>, B<HTTPS_PROXY>, B<HTTP_PROXY> 86e1051a39Sopenharmony_ci 87e1051a39Sopenharmony_ciSpecify a proxy hostname. 88e1051a39Sopenharmony_ciSee L<OSSL_HTTP_parse_url(3)>. 89e1051a39Sopenharmony_ci 90e1051a39Sopenharmony_ci=back 91e1051a39Sopenharmony_ci 92e1051a39Sopenharmony_ci=head1 COPYRIGHT 93e1051a39Sopenharmony_ci 94e1051a39Sopenharmony_ciCopyright 2019-2021 The OpenSSL Project Authors. All Rights Reserved. 95e1051a39Sopenharmony_ci 96e1051a39Sopenharmony_ciLicensed under the Apache License 2.0 (the "License"). You may not use 97e1051a39Sopenharmony_cithis file except in compliance with the License. You can obtain a copy 98e1051a39Sopenharmony_ciin the file LICENSE in the source distribution or at 99e1051a39Sopenharmony_ciL<https://www.openssl.org/source/license.html>. 100e1051a39Sopenharmony_ci 101e1051a39Sopenharmony_ci=cut 102