| =pod |
| |
| =head1 NAME |
| |
| openssl-env - OpenSSL environment variables |
| |
| =head1 DESCRIPTION |
| |
| The OpenSSL libraries use environment variables to override the |
| compiled-in default paths for various data. |
| To avoid security risks, the environment is usually not consulted when |
| the executable is set-user-ID or set-group-ID. |
| |
| =over 4 |
| |
| =item B<CTLOG_FILE> |
| |
| Specifies the path to a certificate transparency log list. |
| See L<CTLOG_STORE_new(3)>. |
| |
| =item B<OPENSSL> |
| |
| Specifies the path to the B<openssl> executable. Used by |
| the B<rehash> script (see L<openssl-rehash(1)/Script Configuration>) |
| and by the B<CA.pl> script (see L<CA.pl(1)/NOTES> |
| |
| =item B<OPENSSL_CONF>, B<OPENSSL_CONF_INCLUDE> |
| |
| Specifies the path to a configuration file and the directory for |
| included files. |
| See L<openssl(1)> and L<config(5)>. |
| |
| =item B<OPENSSL_CONFIG> |
| |
| Specifies a configuration option and filename for the B<req> and B<ca> |
| commands invoked by the B<CA.pl> script. |
| See L<CA.pl(1)>. |
| |
| =item B<OPENSSL_ENGINES> |
| |
| Specifies the directory from which dynamic engines are loaded. |
| See L<openssl-engine(1)>. |
| |
| =item B<OPENSSL_MALLOC_FD>, B<OPENSSL_MALLOC_FAILURES> |
| |
| If built with debugging, this allows memory allocation to fail. |
| See L<OPENSSL_malloc(3)>. |
| |
| =item B<OPENSSL_MODULES> |
| |
| Specifies the directory from which cryptographic providers are loaded. |
| |
| =item B<OPENSSL_WIN32_UTF8> |
| |
| If set, then L<UI_OpenSSL(3)> returns UTF-8 encoded strings, rather than |
| ones encoded in the current code page, and |
| the L<openssl(1)> program also transcodes the command-line parameters |
| from the current code page to UTF-8. |
| This environment variable is only checked on Microsoft Windows platforms. |
| |
| =item B<RANDFILE> |
| |
| The state file for the random number generator. |
| This should not be needed in normal use. |
| See L<RAND_load_file(3)>. |
| |
| =item B<SSL_CERT_DIR>, B<SSL_CERT_FILE> |
| |
| Specify the default directory or file containing CA certificates. |
| See L<SSL_CTX_load_verify_locations(3)>. |
| |
| =item B<TSGET> |
| |
| Additional arguments for the L<tsget(1)> command. |
| |
| =back |
| |
| =head1 COPYRIGHT |
| |
| Copyright 2019-2020 The OpenSSL Project Authors. All Rights Reserved. |
| |
| Licensed under the Apache License 2.0 (the "License"). You may not use |
| this file except in compliance with the License. You can obtain a copy |
| in the file LICENSE in the source distribution or at |
| L<https://www.openssl.org/source/license.html>. |
| |
| =cut |
