If OpenSSL is configured to use a provider that doesn't implement implicit
rejection, the code still needs to handle the returned values
using side-channel free code.
-Side-channel free handling of the error stack can be peformed using
+Side-channel free handling of the error stack can be performed using
either a pair of unconditional L<ERR_set_mark(3)> and L<ERR_pop_to_mark(3)>
calls or by using the L<ERR_clear_error(3)> call.