Re: [openssl-users] OpenSSL 1.1 X509_STORE sharing

2018-09-18 Thread Viktor Dukhovni
> On Sep 18, 2018, at 1:04 PM, Viktor Dukhovni > wrote: > > That depends on whether setting the cert_store element was done properly (in > a way > that incremented the reference count) or not. See the documentation of: > > SSL_CTX_set1_cert_store(3) > SSL_CTX_set_cert_store(3)

Re: [openssl-users] OpenSSL 1.1 X509_STORE sharing

2018-09-18 Thread Viktor Dukhovni
> On Sep 18, 2018, at 12:30 PM, Maxwell Dreytser wrote: > >> X509_STORE_free() decrements a reference count, and frees the object only >> when the count reaches zero. >> > Was this behavior the same in older versions? Yes. > If so, then there is no reason to clear cert_store even in older vers

Re: [openssl-users] OpenSSL 1.1 X509_STORE sharing

2018-09-18 Thread Viktor Dukhovni
> On Sep 18, 2018, at 12:12 PM, ad...@mdtech.us wrote: > > I have some legacy code that I am updating for 1.1 and there they set > SSL_CTX::cert_store to NULL before `SSL_CTX_free`. Is this neccessary for the > X509_STORE to be shared between contexts? > Note that this still has to be buildab

[openssl-users] OpenSSL 1.1 X509_STORE sharing

2018-09-18 Thread admin
Hello, I have some legacy code that I am updating for 1.1 and there they set SSL_CTX::cert_store to NULL before `SSL_CTX_free`. Is this neccessary for the X509_STORE to be shared between contexts? Note that this still has to be buildable on 1.0 with the same result. In the docs it says "X509_S