[Bugs] [Bug 906763] SSL code does not use OpenSSL multi-threading interface

bugzilla at redhat.com bugzilla at redhat.com
Thu Apr 9 09:56:53 UTC 2015


https://bugzilla.redhat.com/show_bug.cgi?id=906763



--- Comment #4 from Anand Avati <aavati at redhat.com> ---
COMMIT: http://review.gluster.org/10075 committed in master by Vijay Bellur
(vbellur at redhat.com) 
------
commit 8830e90fa1b131057e4ee1742cb83d78102714c0
Author: Jeff Darcy <jdarcy at redhat.com>
Date:   Tue Mar 31 14:34:22 2015 -0400

    socket: use OpenSSL multi-threading interfaces

    OpenSSL isn't thread-safe unless you register these locking and thread
    ID functions.  Most often the crashes would occur around
    X509_verify_cert, even though it's insane that the certificate parsing
    functions wouldn't be thread-safe.  The bug for this was filed over
    two years ago, but it didn't seem like a high priority because the bug
    didn't bite anyone until it caused a spurious regression-test failure.
    Ironically, that was on a test for a *different* spurious
    regression-test failure, which I guess is just deserts[1] for leaving
    this on the to-do list so long.

    [1] Yes, it really is "deserts" in that phrase - not as in very dry
    places, but from late Latin "deservire" meaning to serve well or
    zealously.  Aren't commit messages educational?

    Change-Id: I2a6c0e9b361abf54efa10ffbbbe071404f82b0d9
    BUG: 906763
    Signed-off-by: Jeff Darcy <jdarcy at redhat.com>
    Reviewed-on: http://review.gluster.org/10075
    Tested-by: Gluster Build System <jenkins at build.gluster.com>
    Reviewed-by: Kaleb KEITHLEY <kkeithle at redhat.com>
    Reviewed-by: Vijay Bellur <vbellur at redhat.com>

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.


More information about the Bugs mailing list