Re: cvs commit: openssl/ssl ssl_cert.c ssltest.c

[Richard Levitte - VMS Whacker]

From: [EMAIL PROTECTED]

bodo>    /* crypto/ex_data.c */
bodo>   +
bodo>   +/*
bodo>   + * This is not thread-safe, nor can it be changed to become thread-safe
bodo>   + * without changing various function prototypes and using a lot of locking.
bodo>   + * Luckily, it's not really used anywhere except in ssl_verify_cert_chain
bodo>   + * via SSL_get_ex_data_X509_STORE_CTX_idx (ssl/ssl_cert.c), where
bodo>   + * new_func, dup_func, and free_func all are 0.
bodo>   + *
bodo>   + * Any multi-threaded application crazy enough to use ex_data for its own
bodo>   + * purposes had better make sure that SSL_get_ex_data_X509_STORE_CTX_idx
bodo>   + * is called once before multiple threads are created.
bodo>   + */

Not quite right.  It's also used in the CHIL/hwcrhk engine as a clever
tool to keep track of the actual "hardware" key that an RSA is
connected to.

-- 
Richard Levitte   \ Spannv�gen 38, II \ [EMAIL PROTECTED]
Chairman@Stacken   \ S-168 35  BROMMA  \ T: +46-8-26 52 47
Redakteur@Stacken   \      SWEDEN       \ or +46-709-50 36 10
Procurator Odiosus Ex Infernis                -- [EMAIL PROTECTED]
Member of the OpenSSL development team: http://www.openssl.org/
Software Engineer, Celo Communications: http://www.celocom.com/

Unsolicited commercial email is subject to an archival fee of $400.
See <http://www.stacken.kth.se/~levitte/mail/> for more info.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]