[openssl-dev] About multi-thread unsafe for APIs defined in crypto/objects/obj_dat.c

Peter Waltenberg pwalten at au1.ibm.com
Wed Jan 24 01:23:03 UTC 2018


It's also not that much of a problem in practice.. 
If you are using those API's you are adding new crypto. methods. Doing 
that after threading has started is not going to give good results with or 
without locking.

Peter




From:   "Salz, Rich via openssl-dev" <openssl-dev at openssl.org>
To:     "openssl-dev at openssl.org" <openssl-dev at openssl.org>
Date:   24/01/2018 11:19
Subject:        Re: [openssl-dev] About multi-thread unsafe for APIs 
defined in crypto/objects/obj_dat.c
Sent by:        "openssl-dev" <openssl-dev-bounces at openssl.org>



OpenSSL APIs, which makes the following OpenSSL documentation statement 
invalid (https://www.openssl.org/docs/man1.0.2/crypto/threads.html)
 
"OpenSSL can safely be used in multi-threaded applications provided that 
at least two callback functions are set, locking_function and 
threadid_func."
 
Is there any planning to fix this issue?
 
 
Well, the most likely fix is to make the “safely” wording be more vague, 
which I doubt you’ll like.  But I doubt anyone on the team has much 
interest in fixing 1.0.2 locking issues.-- 
openssl-dev mailing list
To unsubscribe: 
https://urldefense.proofpoint.com/v2/url?u=https-3A__mta.openssl.org_mailman_listinfo_openssl-2Ddev&d=DwICAg&c=jf_iaSHvJObTbx-siA1ZOg&r=K53ZTnW2gq2IjM1tbpz7kYoHgvTfJ_aR8s4bK_o2xzY&m=xEO93f-eFk98ZtSS2VW5oQoqCSoxBFAun8n0dZayTrs&s=9NZPKi5lqIGH6Jq4RqlHOiKqzuqUqZQMEQvpBr3aKsw&e=





-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20180124/4f908905/attachment-0001.html>


More information about the openssl-dev mailing list