Re: [openssl-project] Applying system defaults to TLS config

2018-03-15 Thread Viktor Dukhovni
> On Mar 15, 2018, at 8:12 AM, Salz, Rich wrote: > > https://github.com/openssl/openssl/pull/4848 I am also concerned about the performance implications of applying the system settings at every SSL_CTX_new() (if that's the mechanism). How does this interact with the

[openssl-project] Applying system defaults to TLS config

2018-03-15 Thread Salz, Rich
https://github.com/openssl/openssl/pull/4848 The crux of the issue is that this would change SSL_CTX to apply system defaults when the object is created. In conjunction with the system config file include stuff, this makes it easy to change the behavior of all applications running on a system.