> This small change also changes behavior of OpenSSL dramatically.
What do you mean by "dramatically"? What does a openssl.cnf configuration contain?
Do other applications using OpenSSL call OPENSSL_config(NULL)?
Since OPENSSL_config() accepts a filename, maybe a first step would be to expose the function as ssl.OPENSSL_config(filename) to allow user to load *explicitly* a configuration file? ssl.OPENSSL_config() would call OPENSSL_config(NULL). Would it work for you, Gustavo?
--
More links:
- https://wiki.openssl.org/index.php/Manual:OPENSSL_config(3)
- https://en.wikibooks.org/wiki/OpenSSL/Initialization |