On Thu, 7 Aug 2014, Stephen Henson via RT wrote:

I would like OPENSSL_config() to not call exit.

The whole point of OPENSSL_config() is that it is a minimal function that just tries to load configuration modules and is better than nothing if the application cannot include appropriate error handling. It has no idea what an application considered a fatal error so it errs on the side of caution.

As the documentation says:

"Applications which need finer control over their configuration functionality should use the configuration functions such as CONF_load_modules() directly."

I can't agree with that since I believe exit() is not a business a library should do almost no matter what, but clearly you think otherwise.

I would then suggest that the wording in the documentation clearly should say that it will exit() on config file errors. Right now it says:

 "Any errors are ignored"

... which in my eyes is highly misleading if not downright wrong.

--

 / daniel.haxx.se
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to