[xmlsec] more error handling concerns

Aleksey Sanin aleksey at aleksey.com
Thu Sep 5 10:02:14 PDT 2002


Which OpenSSL version do you use? Probably it's worth to inform
OpenSSL guys about this.

Aleksey

Moultrie, Ferrell (ISSAtlanta) wrote:

>Aleksey:
>  One difficulty I'm having with the new error handler and using the
>OpenSSL error stack is that the OpenSSL crypto library frequently uses
>the error stack to capture "expected" errors. When one of those occurs,
>it calls ERR_clear() which removes not only the OpenSSL error info but
>any previously stored xmlsec errors -- which I haven't even had a chance
>to see yet! The only option appears to be to override the default xmlsec
>error callback -- but that gets us back to needing thread local storage
>in the application, etc. Sigh.
>Ferrell
>
>=====================================
>Ferrell Moultrie (ferrell at iss.net)
>Software Engineer
>
>Internet Security Systems, Inc.
>6303 Barfield Road
>Atlanta, Georgia 30328
>Phone:  404-236-2600
>Direct: 404-236-2849
>Fax:    404-236-2632
>http://www.iss.net
>
>Internet Security Systems -- The Power to Protect
>=====================================
>_______________________________________________
>xmlsec mailing list
>xmlsec at aleksey.com
>http://www.aleksey.com/mailman/listinfo/xmlsec
>  
>





More information about the xmlsec mailing list