]> git.ipfire.org Git - thirdparty/krb5.git/commit
In PKINIT, use library initializer for OpenSSL
authorTomas Kuthan <tkuthan@gmail.com>
Fri, 11 Apr 2014 13:36:53 +0000 (15:36 +0200)
committerGreg Hudson <ghudson@mit.edu>
Tue, 15 Apr 2014 16:21:13 +0000 (12:21 -0400)
commitd49e9f0e14adb24e6fe129080c54a0571a39611b
treeee21c054e3e84baaa40217914bc3abfd24fc817c
parent3b72cefb1bbf231192a2b92c31f2c91217f7d58c
In PKINIT, use library initializer for OpenSSL

Use a library initializer to prevent multiple threads using PKINIT
from concurently initializing OpenSSL functions.  For cases where
MT-safety is not assured by registering OpenSSL locking callbacks,
this significantly lowers the odds of crashes caused by races in
OpenSSL initialization.  (If OpenSSL initialization functions are
called by some other thread directly, crashes are still possible.)

[ghudson@mit.edu: simplify code changes and commit message]

ticket: 6413
src/plugins/preauth/pkinit/pkinit_crypto_openssl.c