2a1e2fe145
FIPS module code *always* runs within the scope of an associated OPENSSL_CTX. When the module is loaded the OPENSSL_CTX gets created, and when the module is unloaded the OPENSSL_CX gets freed. A module may be loaded multiple times within the scope of different OPENSSL_CTX objects. "Global" data should always be stored within the OPENSSL_CTX. In this way it will always get cleaned up properly when the module is unloaded. All current code within the FIPS module works this way. To avoid "accidents" we disabled the RUN_ONCE code inside the FIPS module. Reviewed-by: Paul Dale <paul.dale@oracle.com> (Merged from https://github.com/openssl/openssl/pull/9308) |
||
---|---|---|
.. | ||
internal | ||
openssl |