Crate confium_openssl_provider 

OpenSSL 3.0 provider using Confium for signing.

Allows OpenSSL applications (nginx, Apache, OpenSSH, etc.) to use Confium-backed threshold signing keys without code changes. Implements the OpenSSL 3.0 provider API (OSSL_OP_*).

The provider is loaded via OpenSSL config or OPENSSL_CONF env var:

openssl_conf = openssl_init

[openssl_init]
providers = provider_sect

[provider_sect]
confium = confium_sect

[confium_sect]
activate = 1
module = /usr/lib/confium/confium_openssl_provider.so

See TODO.roadmap/28-mode2-pki-replacement.md for full spec.

Structs

ProviderConfig

Provider configuration.

ProviderInfo

Provider metadata reported to OpenSSL.

Enums

Algorithm

Algorithms supported (mapped to OpenSSL algorithm names).

Operation

Operations supported by this provider (subset of OpenSSL OSSL_OP_*).