[openssl-dev] Query related to API SSL_set_SSL_CTX

[Patel, Anirudh (Anirudh)]

Guys, any suggestions that you might have :)

Regards,
Anirudh
From: openssl-dev [mailto:openssl-dev-bounces at openssl.org] On Behalf Of Patel, Anirudh (Anirudh)
Sent: Monday, October 24, 2016 11:32 AM
To: openssl-dev at openssl.org
Subject: [openssl-dev] Query related to API SSL_set_SSL_CTX

Hi Guys,

I have create a shared ssl ctx as below:

boost::shared_ptr<SSL_CTX> SharedSslCtx;
mSslCtx = SharedSslCtx(SSL_CTX_new(meth), ctx_deleter)

I have a copy of the above mSslCtx in a separate class under another shared pointer mCtx. Once I get the incoming TLS connection an SSL object is created as below:
mSSL = SSL_new(mCtx.get());

Now, after every CRL I download SSL_CTX is updated again (mSslCtx = old one is deleted and a new is created). But, currently I do not update mCtx object of the other class.

To update mCtx and the SSL object with the newly updated SSL_CTX I am doing the following:
mCtx = mSslCtx;
SSL_set_SSL_CTX(mSSL, mCtx.get());

I am in no desperate need of updating mCtx but just to be in sync I did the above. Could you please let me know if using the above API might have some adverse effects or should I skip using it or is there a better way to do it?

Thanks & Regards,
Anirudh Patel
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20161025/3ad36c12/attachment.html>