[openssl-project] Applying system defaults to TLS config

Viktor Dukhovni openssl-users at dukhovni.org
Thu Mar 15 19:41:27 UTC 2018



> On Mar 15, 2018, at 8:12 AM, Salz, Rich <rsalz at akamai.com> wrote:
> 
> https://github.com/openssl/openssl/pull/4848

I am also concerned about the performance implications of applying
the system settings at every SSL_CTX_new() (if that's the mechanism).

How does this interact with the creation of SSL contexts used for
server-side SNI support?

Finally, how is the configuration file specified? Do environment
variables influence the file location, and if so is that still
the case for setuid/setgid processes?

-- 
	Viktor.



More information about the openssl-project mailing list