https metadata fetch weirdness after windows SP 3.5.0 update

Paul B. Henson henson at acm.org
Fri Mar 28 05:17:38 UTC 2025


On 3/27/2025 5:11 AM, Cantor, Scott wrote:

> There didn't used to be so many flags for all of TLS' bugs at the
> time.

Heh. So many bugs and workarounds :). I'd be tempted to extend the SP 
option to allow arbitrary openssl flags, but the current release is 
always the last one that's going to be distributed ;).

>> Where does the version of openssl bundled with the SP look for
>> openssl.cnf?
> 
> It doesn't that I'm aware, the SP has no dependency on one. We
> create one to generate keys on the fly.
Hmm, based on extracting the MSI, it looks like the openssl binary is 
installed into lib/openssl.exe, I'll ask them to run that with the 
"version -d" option which should indicate what directory it will look 
for the configuration file in. The library always tries to open the 
default configuration file when it initializes, it's just a question of 
where it looks.

Thanks…


More information about the users mailing list