[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: mod_ssl and openssl 1.0.2 initialization

On Mon, Jul 23, 2018 at 11:50 AM, Yann Ylavic <ylavic.dev@xxxxxxxxx> wrote:
> I started to try to centralize openssl setup in APR (r1833421, but I'm
> being cautious here because it kind of has been reverted lately...).
> What do you think of an 'apr_crypto_lib_init("openssl", ..., pool)'
> call from any module, where all the init/cleanup would be done once
> for all with the lifetime of the given pool (pconf, or pglobal if the
> core itself uses openssl).

Btw, this is already used in trunk's ssl_hook_pre_config(), it takes
into account the case where ap_init_rng() already initialized openssl
on pglobal (so in mod_ssl apr_crypto_lib_init("openssl") can be a
noop), but this could work between modules too (with pconf).