[openssl-dev] Query related to API SSL_set_SSL_CTX

[Patel, Anirudh (Anirudh)]

Hi Guys,

I have create a shared ssl ctx as below:

boost::shared_ptr<SSL_CTX> SharedSslCtx;
mSslCtx = SharedSslCtx(SSL_CTX_new(meth), ctx_deleter)

I have a copy of the above mSslCtx in a separate class under another shared pointer mCtx. Once I get the incoming TLS connection an SSL object is created as below:
mSSL = SSL_new(mCtx.get());

Now, after every CRL I download SSL_CTX is updated again (mSslCtx = old one is deleted and a new is created). But, currently I do not update mCtx object of the other class.

To update mCtx and the SSL object with the newly updated SSL_CTX I am doing the following:
mCtx = mSslCtx;
SSL_set_SSL_CTX(mSSL, mCtx.get());

I am in no desperate need of updating mCtx but just to be in sync I did the above. Could you please let me know if using the above API might have some adverse effects or should I skip using it or is there a better way to do it?

Thanks & Regards,
Anirudh Patel
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20161024/c4252fa3/attachment.html>