https://bz.apache.org/bugzilla/show_bug.cgi?id=65181

--- Comment #14 from Edin Hodzic <d...@concisoft.com> ---
One other potential improvement in the OpenSSL interaction might be to enable
OpenSSL configuration:

In ssl.c, initialization is done with the call:
    OPENSSL_init_ssl(OPENSSL_INIT_ENGINE_ALL_BUILTIN, NULL);

The openssl command in OpenSSL source performs initialization like this:
    OPENSSL_init_ssl(OPENSSL_INIT_ENGINE_ALL_BUILTIN |
OPENSSL_INIT_LOAD_CONFIG, NULL);

The OPENSSL_INIT_LOAD_CONFIG makes the OpenSSL library load configuration (for
example /etc/ssl/openssl.cnf by default on Ubuntu). The configuration could
also be specified through a path in OPENSSL_CONF environment variable (that
could be set in setenv.sh in Tomcat for full control over the OpenSSL
configuration.)

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to