Re: [openssl.org #2293] OpenSSL dependence on external threading functions is a critical design flaw

2010-06-24 Thread Peter Waltenberg
We hit the same problem with IBM code. You simply can't resolve this "externally" when you have multiple shared libraries that were built independently stuffed into the same process - and in our case most of those libs were originally applications in their own right (so think they are "god" anyway

Re: [openssl.org #2293] OpenSSL dependence on external threading functions is a critical design flaw

2010-06-24 Thread Michael Sweet via RT
On Jun 24, 2010, at 4:58 PM, Ger Hobbelt via RT wrote: > The only critical bit here is opinion replacing analysis. I won't get into a personal attack. > As you said so yourself, and I quote: "When both an application and a > library ([...]) both initialize and register their own threading functio

Re: [openssl.org #2293] OpenSSL dependence on external threading functions is a critical design flaw

2010-06-24 Thread Ger Hobbelt via RT
The only critical bit here is opinion replacing analysis. As you said so yourself, and I quote: "When both an application and a library ([...]) both initialize and register their own threading functions, bad things happen and the application can crash.") Indeed. Spot on, I'd say. That is /exactly

RE: [openssl.org #2293] OpenSSL dependence on external threading functions is a critical design flaw

2010-06-24 Thread Rene Hollan
And how, pray tell, should OpenSSL know the threading model the application uses? Unless I'm missing something, it strikes me as perfectly reasonable for OpenSSL to require a "reasonable" threading API to implement SSL data integrity, and for the application to provide an implementation that wr

Out of Office AutoReply: [openssl.org #2293] OpenSSL dependence on external threading functions is a critical design flaw

2010-06-24 Thread Marko Pohajac via RT
Thank you for your message. I am currently out of the office, with no access to e-mail. I will be returning on 28th of June. For SCE matters please contact bojan.lozin...@comtrade.com . For other DP matters please contact aleksander.pirno...@comtrade.com . Best Regards, Marko Title: Out of Off

[openssl.org #2293] OpenSSL dependence on external threading functions is a critical design flaw

2010-06-24 Thread Michael Sweet via RT
An emerging issue with CUPS and other applications that use it has identified a critical design flaw in how OpenSSL supports multithreading. Specifically, a multi-threaded application or library that uses OpenSSL must provide its own threading functions for OpenSSL to use. When both an applica

[PATCH/cygwin] new packaging of openssl in the Cygwin distro

2010-06-24 Thread Corinna Vinschen
Hi, could somebody with checkin rights please apply the below patch to the util/cygwin.sh file in the 0.9.8 branch as well as in CVS HEAD, please? I changed the packaging of the OpenSSL package in the Cygwin distro so that the runtime libraries are packaged separately in a versioned library packa