From: Alan T. DeKok <aland@freeradius.org>
Date: Mon, 25 Jul 2022 11:19:15 +0000 (-0400)
Subject: call init_ssl(), not init_crypto()
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=aee06b99383f11499628aef47280716cba7a5ded;p=thirdparty%2Ffreeradius-server.git

call init_ssl(), not init_crypto()

init_ssl() calls init_crypto(), too.  And we need both in order
to pre-load all error strings.  Helps with comments in #4624
---

diff --git a/src/lib/tls/base.c b/src/lib/tls/base.c
index 30e6bc02b46..074b251c427 100644
--- a/src/lib/tls/base.c
+++ b/src/lib/tls/base.c
@@ -397,7 +397,10 @@ int fr_openssl_init(void)
 	 *      they may unload elements of providers once all
 	 *	the contexts have been cleaned up.
 	 */
-	OPENSSL_init_crypto(OPENSSL_INIT_NO_ATEXIT | OPENSSL_INIT_LOAD_CONFIG, NULL);
+	if (OPENSSL_init_ssl(OPENSSL_INIT_NO_ATEXIT | OPENSSL_INIT_LOAD_CONFIG, NULL) != 1) {
+		fr_tls_log_error(NULL, "Failed calling OPENSSL_init_crypto()");
+		return -1;
+	}
 
 #if OPENSSL_VERSION_NUMBER >= 0x30000000L
 	/*