On 3/5/2019 1:16 PM, Yann Ylavic wrote:
Furthermore, if that scenario were a real use case, it'd mean that libldap could initialize openssl with no regard to httpd needs,
Everybody has to play nice, but ... yes. Random libraries might need OpenSSL for their own reasons, and the application cannot predict which libraries might need it or what those reasons might be. OpenSSL must be designed to be used by multiple non-coordinated components running in the same process, including by dynamically loaded and unloaded shared objects. -- Jordan Brown, Oracle ZFS Storage Appliance, Oracle Solaris |