> Speaking of which, I've recently discovered (a documented interface landmine) that: status = SSL_read(ssl, ...); err = SSL_get_error(ssl, status); > is an anti-pattern, because the "correct" usage is: It's not unlike checking errno without knowing if the syscall actually failed.