In OpenLDAP we've been using
  CRYPTO_add(&ctx->references, 1, CRYPTO_LOCK_SSL_CTX)
to manage our own SSL_CTXs but this is not possible with current 1.1. Making the structures opaque is a good move, but please provide methods to manipulate refcounts.

Currently ssl_lib.c appears to bump the ctx refcount twice, in SSL_new. Why is that?

https://github.com/openssl/openssl/blob/master/ssl/ssl_lib.c#L670
https://github.com/openssl/openssl/blob/master/ssl/ssl_lib.c#L681

--
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/
_______________________________________________
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Reply via email to