Guys, any suggestions that you might have :)

Regards,
Anirudh
From: openssl-dev [mailto:openssl-dev-boun...@openssl.org] On Behalf Of Patel, 
Anirudh (Anirudh)
Sent: Monday, October 24, 2016 11:32 AM
To: openssl-dev@openssl.org
Subject: [openssl-dev] Query related to API SSL_set_SSL_CTX

Hi Guys,

I have create a shared ssl ctx as below:

boost::shared_ptr<SSL_CTX> SharedSslCtx;
mSslCtx = SharedSslCtx(SSL_CTX_new(meth), ctx_deleter)

I have a copy of the above mSslCtx in a separate class under another shared 
pointer mCtx. Once I get the incoming TLS connection an SSL object is created 
as below:
mSSL = SSL_new(mCtx.get());

Now, after every CRL I download SSL_CTX is updated again (mSslCtx = old one is 
deleted and a new is created). But, currently I do not update mCtx object of 
the other class.

To update mCtx and the SSL object with the newly updated SSL_CTX I am doing the 
following:
mCtx = mSslCtx;
SSL_set_SSL_CTX(mSSL, mCtx.get());

I am in no desperate need of updating mCtx but just to be in sync I did the 
above. Could you please let me know if using the above API might have some 
adverse effects or should I skip using it or is there a better way to do it?

Thanks & Regards,
Anirudh Patel
-- 
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Reply via email to