[Vortex] [ISSUE] API mismatch using custom SSL contexts

Benoit Amiaux b.amiaux at ateme.com
Tue Apr 22 10:14:54 CEST 2008


Hi,

In current Vortex API, when the automagic TLS setup using file-based 
certificates isn't enough, it is possible to use SSL contexts.
The issue is that the proposed API only allow us to create the context 
but not how to destroy it. This is cumbersome because, as usual, when 
vortex is used as a DLL, it forces us to use the exact same version of 
openssl under which the dll has been linked or you wil suffer instant 
heap corruption when any SLL context is deallocated.
I see two possible solutions:
- add another API to offer buffer-based certificates and private keys 
for vortex. In this case it will only use SSL functions from the library 
it has been linked with, which guarantee proper behavior.
- add an abstraction layer above SSL functions, which allows us to use 
any SSL implementation. This abstraction have to be complete, including 
allocation, processing and deallocation functions. A default file-based 
SSL implementation could be added.

Maybe there are better solutions ?

Bye,
Benoit AMIAUX





More information about the Vortex mailing list