On Thu Aug 07 19:33:55 2014, [email protected] wrote: > Hi > > As OpenSSL is a library, it should only ever use exit in the case of > sever > problems and not just for "mere" run-time problems. > > OPENSSL_config() is documented to be strongly recommended but yet it > calls > exit(1) if it fails to parse the config file. I find it much too > fragile and > makes it really hard to use in a lots of real-world cases. >
The recommendation is to either use OPENSSL_config() or functions such as CONF_modules_load() in your case it seems the latter is more appropriate. > I would like OPENSSL_config() to not call exit. > The whole point of OPENSSL_config() is that it is a minimal function that just tries to load configuration modules and is better than nothing if the application cannot include appropriate error handling. It has no idea what an application considered a fatal error so it errs on the side of caution. As the documentation says: "Applications which need finer control over their configuration functionality should use the configuration functions such as CONF_load_modules() directly." Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [email protected]
