• M
    Move the loading of the ssl_conf module to libcrypto · d8f031e8
    Matt Caswell 提交于
    The GOST engine needs to be loaded before we initialise libssl. Otherwise
    the GOST ciphersuites are not enabled. However the SSL conf module must
    be loaded before we initialise libcrypto. Otherwise we will fail to read
    the SSL config from a config file properly.
    
    Another problem is that an application may make use of both libcrypto and
    libssl. If it performs libcrypto stuff first and OPENSSL_init_crypto()
    is called and loads a config file it will fail if that config file has
    any libssl stuff in it.
    
    This commit separates out the loading of the SSL conf module from the
    interpretation of its contents. The loading piece doesn't know anything
    about SSL so this can be moved to libcrypto. The interpretation of what it
    means remains in libssl. This means we can load the SSL conf data before
    libssl is there and interpret it when it later becomes available.
    
    Fixes #5809
    Reviewed-by: NRichard Levitte <levitte@openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/5818)
    d8f031e8
libcrypto.num 313.6 KB