On Thu Aug 07 19:33:55 2014, [email protected] wrote:
> Hi
>
> As OpenSSL is a library, it should only ever use exit in the case of
> sever
> problems and not just for "mere" run-time problems.
>
> OPENSSL_config() is documented to be strongly recommended but yet it
> calls
> exit(1) if it fails to parse the config file. I find it much too
> fragile and
> makes it really hard to use in a lots of real-world cases.
>

The recommendation is to either use OPENSSL_config() or functions such as
CONF_modules_load() in your case it seems the latter is more appropriate.

> I would like OPENSSL_config() to not call exit.
>

The whole point of OPENSSL_config() is that it is a minimal function that just
tries to load configuration modules and is better than nothing if the
application cannot include appropriate error handling. It has no idea what an
application considered a fatal error so it errs on the side of caution.

As the documentation says:

"Applications which need finer control over their configuration functionality
should use the configuration functions such as CONF_load_modules() directly."

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to