Skip to content

Commit

Permalink
Suppress errors on the OpenSSL error stack
Browse files Browse the repository at this point in the history
P11PROV_raise() emits errors in the openssl error stack.

The OpenSSL TLS code checks the error stack and fails TLS operations
if any error is found on the stack.

Change pkcs11-provider code to not emit on the openssl error stack
when operations fail, as sometimes that is expected and the code
can still complete the overall requested operation via fallbacks.

The code now emits only a debug error, which is routed to the
pkcs11-provider debug file and does not poison the OpenSSL error stack.

Signed-off-by: Simo Sorce <simo@redhat.com>
  • Loading branch information
simo5 committed Dec 17, 2024
1 parent e4cb06a commit 41426ec
Show file tree
Hide file tree
Showing 2 changed files with 130 additions and 130 deletions.
Loading

0 comments on commit 41426ec

Please sign in to comment.