[openssl-dev] [openssl.org #4343] master: EC_KEY_priv2buf (): check parameter sanity

Jeffrey Walton noloader at gmail.com
Fri Feb 26 17:22:52 UTC 2016


>> > I'd like to propose a policy of no bug fixes to undocumented public
>> > interfaces.  If the interface is useful enough to fix, it has to be
>> > documented.  Anyone care to produce manpages for EC_KEY_priv2buf or
>> > EC_KEY_priv2oct?
>> >
>> Correct me if I am wrong... API's that start with capitol letters are
>> public. Private interfaces use lowercase letters.
>> Documented/undocumented does not really factor things.
>
> You're wrong.  Once OpenSSL's past sins are remediated, public
> interfaces are precisely those that are documented.  For now, public
> interfaces are either macros or functions and global variables
> those whose symbols are exported by the libssl and libcrypto shared
> libraries.  This is not a good place to be.
>

Thanks. Is that documented anywhere? (I'm still providing the old
guidance, so it would be nice to cite the change and the documented
policy).

Jeff


More information about the openssl-dev mailing list