Regarding the OpenSSL `ERR_clear_error()` overhead introduced in #1464:
This PR should clear the OpenSSL error queue in `XrdCryptosslX509ParseBucket()`, along with reverting the `ERR_clear_error()` calls in `XrdTlsSocket`.
So far, I'm unable to reproduce the TLS error on our local xcache with this patch (on the latest experimental, xrootd-5.2.1-0.experimental.2679300.76d03f61). This certainly could use some thorough testing to confirm. @osschar
You can view, comment on, or merge this pull request online at:
https://github.com/xrootd/xrootd/pull/1465
-- Commit Summary --
* [XrdCrypto] Clear OpenSSL error queue in XrdCryptosslX509ParseBucket()
* Revert "[XrdTls] Call ERR_clear_error() ahead of SSL_read(), SSL_write(), and SSL_connect() for client connections"
-- File Changes --
M src/XrdCrypto/XrdCryptosslAux.cc (15)
M src/XrdTls/XrdTlsSocket.cc (9)
-- Patch Links --
https://github.com/xrootd/xrootd/pull/1465.patch
https://github.com/xrootd/xrootd/pull/1465.diff
--
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/xrootd/xrootd/pull/1465
########################################################################
Use REPLY-ALL to reply to list
To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1
