[xmlsec] more error handling concerns

Aleksey Sanin aleksey at aleksey.com
Thu Sep 5 12:06:08 PDT 2002


I've never seen such problem but I use OpenSSL 0.9.7. Sorry, but I probably
will not be able to help you with this :(

Aleksey

Moultrie, Ferrell (ISSAtlanta) wrote:

>I'm using the latest released version, 0.9.6g. We looked at the 0.9.7
>version but it was still in testing and that seemed like not such a good
>plan for us right now given the relative stability of the 0.9.6 release
>series. Just setting breakpoints in OpenSSL on the push and clear
>methods, it looks like it's not an uncommon coding practice so I'd guess
>it's not going to be trivial for them to change.
>Ferrell
>
>-----Original Message-----
>From: Aleksey Sanin [mailto:aleksey at aleksey.com] 
>Sent: Thursday, September 05, 2002 1:02 PM
>To: Moultrie, Ferrell (ISSAtlanta)
>Cc: xmlsec at aleksey.com
>Subject: Re: [xmlsec] more error handling concerns
>
>
>Which OpenSSL version do you use? Probably it's worth to inform
>OpenSSL guys about this.
>
>Aleksey
>
>Moultrie, Ferrell (ISSAtlanta) wrote:
>
>  
>
>>Aleksey:
>> One difficulty I'm having with the new error handler and using the
>>OpenSSL error stack is that the OpenSSL crypto library frequently uses
>>the error stack to capture "expected" errors. When one of those occurs,
>>it calls ERR_clear() which removes not only the OpenSSL error info but
>>any previously stored xmlsec errors -- which I haven't even had a
>>    
>>
>chance
>  
>
>>to see yet! The only option appears to be to override the default
>>    
>>
>xmlsec
>  
>
>>error callback -- but that gets us back to needing thread local storage
>>in the application, etc. Sigh.
>>Ferrell
>>
>>=====================================
>>Ferrell Moultrie (ferrell at iss.net)
>>Software Engineer
>>
>>Internet Security Systems, Inc.
>>6303 Barfield Road
>>Atlanta, Georgia 30328
>>Phone:  404-236-2600
>>Direct: 404-236-2849
>>Fax:    404-236-2632
>>http://www.iss.net
>>
>>Internet Security Systems -- The Power to Protect
>>=====================================
>>_______________________________________________
>>xmlsec mailing list
>>xmlsec at aleksey.com
>>http://www.aleksey.com/mailman/listinfo/xmlsec
>> 
>>
>>    
>>
>
>_______________________________________________
>xmlsec mailing list
>xmlsec at aleksey.com
>http://www.aleksey.com/mailman/listinfo/xmlsec
>  
>





More information about the xmlsec mailing list