David Harris schrieb:
> 
> Another note: The keys/crts are read into the database and then written into an
> unlinked temporary file which is provided to OpenSSL for reading. This patch
> re-uses the same temporary file for all of the key/crts, so I need to truncate
> the file when I write new data to it. I could not find a way to truncate this
> file without running a flush on it. It would be ideal to find a method which
> sets up a  FILE* structure which contains the crt/key data from the database
> file without doing any disk writes. I don't know how to do this or if it can be
> done.

I havn't read your patch (sorry, not enough time) but I have a 
comment. I guess you are using the temp file to provide mod_ssl
with the ability to read it from that file as usual. 

OpenSSL provides you with a much better solution. There is
a general I/O interface (called BIO) that can read from memory
instead of a file with the same functions. I'm not sure how
much it would cost you to dig a bit more into it and what Ralf
thinks about whether your patch is likely to find it's way into
the general disrtibution.

Mail me directly if you have questions regarding my proposal.

-- 
Holger Reif                  Tel.: +49 361 74707-0
SmartRing GmbH               Fax.: +49 361 7470720
Europaplatz 5             [EMAIL PROTECTED]
D-99091 Erfurt                    WWW.SmartRing.de
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to