Re: Configuring to fail when a provider doesn't load

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, Mar 06, 2025 at 09:45:10PM +1100, Viktor Dukhovni wrote:

> I tested failing to load a provider with OpenSSL 3.5 and Postfix, and
> found that OPENSSL_init_ssl() does not actually return an error in that
> case.  Ordinary failure to load a provider is not considered fatal.

This will likely be fixed in a future OpenSSL version, perhaps 3.5:

    https://github.com/openssl/openssl/pull/26997

Though for an application to notice it would need to perform explicit
library initialisation with non-default "settings", as in the Postfix
example.

-- 
    Viktor.

-- 
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe@xxxxxxxxxxx.
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/Z86UjRechtq6zRs7%40chardros.imrryr.org.



[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]

  Powered by Linux