On Tue, Aug 26, 2014 at 10:12:06AM -0400, Salz, Rich wrote:

> > Find a C version (which I have written) of the utility at:
> > http://git.alpinelinux.org/cgit/aports/plain/main/openssl/c_rehash.c
> 
> That's pretty cool.  We'd need to modify it to not use the XXXat
> functions or fnmatch, but definitely something we should consider
> for a future release.

Does this version fix the atomicity problems of the original?

The Perl version deletes all the symlinks and then rebuilds them,
leaving a time window during which verification fails.

The algorithm should be improved to never delete links which are
subsequently recreated.

-- 
        Viktor.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to