[openssl-dev] Constness in SSL_CTX_set_srp_username and SSL_CTX_set_srp_password functions

Krzysztof Kwiatkowski krzysiek at leeds.pl
Mon Feb 16 15:29:36 UTC 2015


Hi,

Currently SSL_CTX_set_srp_username/password functions take char* 
argument for username/password value. In an application level code those 
values are very often const (user provided data). In such cases, when 
passing those values to OpenSSL library either dirty cast needs to be 
performed to remove constness, or const value needs to be copied to 
temporary location (which for SSL_CTX_set_srp_username is useless as 
this function copies again username value in ssl3_ctx_ctrl function).

I've submitted pull request https://github.com/openssl/openssl/pull/227 
, when I try to cleanup API, so that const values also can be passed to 
functions. Please integrate if interested.

Kris



More information about the openssl-dev mailing list