Re: [openssl-users] X509_STORE manipulations and thread-safety

2015-08-12 Thread Salz, Rich
> Is it safe to have a thread reload trusted certificates and crls into a > SSL_CTX's X509_STORE while connections are running in other threads, > especially when considering renegotiations? As a general rule, multi-thread simultaneous access doesn't work and will often make things go ka-boom.

[openssl-users] X509_STORE manipulations and thread-safety

2015-08-12 Thread hokusai
Hello All,   Is it safe to have a thread reload trusted certificates and crls into a SSL_CTX's X509_STORE while connections are running in other threads, especially when considering renegotiations? The idea would be to replace the instance of X509_STORE with a new one or is there a better way t