On Fri, Nov 21, 2014 at 03:21:47PM +0000, Barbe, Charles wrote:

> What looks suspicious to me is the calls to "x509v3_cache_extensions"
> that are in the traces below. This implies to me that openssl is
> caching something. How do I ask it to clear that cache? If i need
> to augment the library to do so, where are the pointers to the
> objects it is caching so I can free it? I tried to trace the code
> but got lost... i'm sure I can trace it given enough time but
> thought I'd ask the community first.

This is not a separate cache,  the extensions are "cached" in each
certificate structure, and should be freed with that certificate.
It just avoids having to decode extensions all over the place,
by computing and saving pre-decoded versions.

-- 
        Viktor.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to