Table of Contents

Bcl.OpenSsl.Jose Namespace

JOSE signing, certificate and JWK key-material providers implemented on the OpenSSL 3.x bindings of Bcl.OpenSsl.Api|TOpenSslCrypto.

Remarks

The providers shipped in Bcl.Jose.Providers.Default reach OpenSSL through Indy, whose headers describe the 1.0.x ABI: they read fields that OpenSSL made opaque in 1.1.0 and load libraries named libeay32 / ssleay32. That stack cannot work against a 1.1+ or 3.x library, and current Linux distributions ship nothing else. This unit uses the accessor-based 3.x API instead, and covers RSA (RS256/384/512 and PS256/384/512), ECDSA (ES256/ES256K/ES384/ES512), public keys read from X.509 certificates, and JWK key material.

Classes

Name Description
TJOSEOpenSsl3Providers Installs the OpenSSL 3.x JOSE providers into TJOSEProviders.