On Thu, 7 Aug 2014, Stephen Henson via RT wrote:

>> I would like OPENSSL_config() to not call exit.
>
> The whole point of OPENSSL_config() is that it is a minimal function that 
> just tries to load configuration modules and is better than nothing if the 
> application cannot include appropriate error handling. It has no idea what 
> an application considered a fatal error so it errs on the side of caution.
>
> As the documentation says:
>
> "Applications which need finer control over their configuration 
> functionality should use the configuration functions such as 
> CONF_load_modules() directly."

I can't agree with that since I believe exit() is not a business a library 
should do almost no matter what, but clearly you think otherwise.

I would then suggest that the wording in the documentation clearly 
should say that it will exit() on config file errors. Right now it says:

  "Any errors are ignored"

... which in my eyes is highly misleading if not downright wrong.

-- 

  / daniel.haxx.se


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to