diff options
| author | Rich Salz <rsalz@openssl.org> | 2015-01-25 21:07:20 -0500 |
|---|---|---|
| committer | Rich Salz <rsalz@openssl.org> | 2015-01-25 21:07:20 -0500 |
| commit | abdd677125f3a9e3082f8c5692203590fdb9b860 (patch) | |
| tree | 2a51a88df3e4b86232ed5d1d18c81a52f369983b /doc/crypto | |
| parent | 8de24b792743d11e1d5a0dcd336a49368750c577 (diff) | |
| download | openssl-abdd677125f3a9e3082f8c5692203590fdb9b860.tar.gz | |
Make OPENSSL_config truly ignore errors.
Per discussion: should not exit. Should not print to stderr.
Errors are ignored. Updated doc to reflect that, and the fact
that this function is to be avoided.
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Diffstat (limited to 'doc/crypto')
| -rw-r--r-- | doc/crypto/OPENSSL_config.pod | 10 |
1 files changed, 4 insertions, 6 deletions
diff --git a/doc/crypto/OPENSSL_config.pod b/doc/crypto/OPENSSL_config.pod index fefe293605..91d61f3f51 100644 --- a/doc/crypto/OPENSSL_config.pod +++ b/doc/crypto/OPENSSL_config.pod @@ -17,8 +17,7 @@ OPENSSL_config() configures OpenSSL using the standard B<openssl.cnf> configuration file name using B<config_name>. If B<config_name> is NULL then the file specified in the environment variable B<OPENSSL_CONF> will be used, and if that is not set then a system default location is used. -In case of error, a message is printed to B<stderr> and the routine -exit's. +Errors are silently ignored. Multiple calls have no effect. OPENSSL_no_config() disables configuration. If called before OPENSSL_config() @@ -37,10 +36,9 @@ The OPENSSL_config() function is designed to be a very simple "call it and forget it" function. It is however B<much> better than nothing. Applications which need finer control over their configuration functionality should use the configuration -functions such as CONF_modules_load() directly. - -It is B<strongly> recommended that B<all> new applications call -CONF_modules_load() during +functions such as CONF_modules_load() directly. This function is deprecated +and its use should be avoided. +Applications should instead call CONF_modules_load() during initialization (that is before starting any threads). There are several reasons why calling the OpenSSL configuration routines is |