[PATCH] Removed ENGINE_load_builtin_engines() call

Maxim Dounin mdounin at mdounin.ru
Fri Jan 27 17:05:31 UTC 2012

# HG changeset patch
# User Maxim Dounin <mdounin at mdounin.ru>
# Date 1327678891 -14400
# Node ID deb5cebcec4d223930d544c6a2e539950663aa59
# Parent  a2559e3cb5453fc754d16ffda06dcb9130f4802a
Removed ENGINE_load_builtin_engines() call.

It's already called by OPENSSL_config().  Calling it again causes some
openssl engines (notably GOST) to corrupt memory, as they don't expect
to be created more than once.

diff --git a/src/event/ngx_event_openssl.c b/src/event/ngx_event_openssl.c
--- a/src/event/ngx_event_openssl.c
+++ b/src/event/ngx_event_openssl.c
@@ -91,8 +91,6 @@ ngx_ssl_init(ngx_log_t *log)
-    ENGINE_load_builtin_engines();
     ngx_ssl_connection_index = SSL_get_ex_new_index(0, NULL, NULL, NULL, NULL);

More information about the nginx-devel mailing list