On Thu, 7 Aug 2014, Stephen Henson via RT wrote:
I would like OPENSSL_config() to not call exit.
The whole point of OPENSSL_config() is that it is a minimal function that
just tries to load configuration modules and is better than nothing if the
application cannot include appropriate error handling. It has no idea what
an application considered a fatal error so it errs on the side of caution.
As the documentation says:
"Applications which need finer control over their configuration
functionality should use the configuration functions such as
CONF_load_modules() directly."
I can't agree with that since I believe exit() is not a business a library
should do almost no matter what, but clearly you think otherwise.
I would then suggest that the wording in the documentation clearly
should say that it will exit() on config file errors. Right now it says:
"Any errors are ignored"
... which in my eyes is highly misleading if not downright wrong.
--
/ daniel.haxx.se
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List openssl-dev@openssl.org
Automated List Manager majord...@openssl.org