Default load TPM provider for all applications

[cobrandt05]

Hi,

I want to use the TPM2 provider with OpenSSL, so that it loads this provider as a default, no matter in which form I am using the openssl library.
I am currently using OpenSSL as a C library in a C++ program.
There are parts in this C++ program, where I can use OSSL_PROVIDER_load, to load the specific providers.
In other parts however, it is not possible for me to specify all the providers I need. I therefore want to configure OpenSSL, such that whenever I use it, the TPM2 provider is loaded as a default.
I already tried to change the /etc/ssl/openssl.cnf file. However, this seems only to change the behavior of the command line tool and not the behavior of the library in my C++ program.
Does someone have a solution for this issue?

Kind Regards,
Corinna

[gotthardp]

Hello. Could the OPENSSL_CONF environment variable be a solution for you? https://docs.openssl.org/3.1/man5/config/#environment