Hi, On Mon, Nov 22, 2021 at 04:55:40PM -0500, Selva Nair wrote: > > (Also, the PR isn't exactly proceeding smoothly... no idea why the > > vcpkg maintainer does not want to see why Lev's PR is an improvement > > of the situation) > > I didn't realize there is a pushback for the patch..May be he needs to see > https://github.com/openssl/openssl/issues/9520, > CVE-2019-5443 <https://nvd.nist.gov/vuln/detail/CVE-2019-5443> and our own > CVE?
Not sure why. Maybe it helps if you add another "pro" voice, with these
references?
But on the other hand, he's right about "what if a user installs $program
to a different location?" - thus:
> I have a patch setting OPENSSL_CONF etc using SetEnvironmentVariableW() but
> it needs more testing especially for OPENSSL_ENGINES and OPENSSL_MODULES in
> 3.0.
> Is _putenv preferred?
... this one sounds like a better way forward.
I have no opinion on _putenv() vs. SetEnvironmentVariableW() - this is
Windows API stuff, so whatever MS thinks we should be using...
gert
--
"If was one thing all people took for granted, was conviction that if you
feed honest figures into a computer, honest figures come out. Never doubted
it myself till I met a computer with a sense of humor."
Robert A. Heinlein, The Moon is a Harsh Mistress
Gert Doering - Munich, Germany g...@greenie.muc.de
signature.asc
Description: PGP signature
_______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel
